Automated decision making

The organization should identify and address all obligations, including legal obligations, to the PII principals resulting from decisions made by the organization and related to the... ... - Licensed content not shown -



Art.20: The data subjects have the right to request the revision, of the decisions made solely on the basis of automated processing of personal data, that affect their interests, including decisions intended to define their personal, professional, consumer, or credit profile or aspects of their personality. (New wording included by Law No. 13,853 of 2019) § 1 The controller must provide, whenever requested, clear and adequate information regarding the criteria and the data procedures used for the automated decision, respecting commercial and industrial secrecy. § 2 In case of failure to supply the information referred to in § 1 based on respect for commercial or industrial secrecy, the National Data Protection Authority may conduct an audit to verify discriminatory aspects in the automated processing of personal data. § 3 (VETOED). (Included by Law No. 13,853 of 2019)