What do organisations need to disclose to individuals about AI and automated decisions?

What do organisations need to disclose to individuals about AI and automated decisions?

Individuals have the right to receive meaningful information about solely automated decisions with significant effects under the General Data Protection Regulation (GDPR).  This includes decisions that will impact an individual’s finances or employment.  But how much information are individuals entitled to receive?  Should they be given the underlying algorithm, or merely a high-level explanation, or something in between?  And what if the inform…

Automated decision-making, including profiling, requires the data controller to comply with stricter rules on the protection of personal data. The CJEU recently clarified the scope of the right of access of persons concerned by such decisions[1]. As a reminder, the GDPR (Article 15 § 1 h)) provides that, in the event of automated decision-making, including profiling[2], the data subject has, by virtue of his or her right of access, the right to …