4 ms·

CJEU landmark ruling on the legality of auto credit ranking and review of DPAs

• fariszr 3y ago
  > the court ruled that the assignment of automatically calculated credit scores is not in line with the GDPR. IMO The biggest point in the article, that's why I modified the title a bit.
• mytailorisrich 3y ago
  For reference, article 22, paragraph 1 of GDPR: "The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her."
  • jruohonen 3y ago
    This is big because it has a direct and explicit linkage to AI (and also the forthcoming AI Act). Previously, many academics assumed that Art. 22 was difficult to enforce, especially due to the wording of "produces legal effects concerning him or her or similarly significantly affects him or her". Note that most public sector AI-decisions have explicit legal effects to data subjects.