LexLint.ioBeta

Know the law your code answers to.

Activities / What code does

Makes high-risk automated decisions

high_risk_decisions

Your app lets software decide, on its own, an outcome with a serious effect on a person, such as a loan, a job, or a benefit.

  • scope code
  • in the registry since 1.0
  • 587 laws in 204 jurisdictions name it

What triggers it

The lint's definition. It makes or scores decisions about a person with legal or similar effect. Also declare each kind it makes, one of the eight *_decisions values.

This covers an automated loan-approval system, a resume-screening tool that rejects candidates without human review, and a claims model that denies a benefit.

Declare each kind of decision it makes as well, from Makes employment decisions to Makes justice decisions, so a rule written for one kind reaches it.

What does not

A recommendation a human reviewer can freely overrule before it takes effect does not count in the same way.

The law it brings into scope

The kinds of law that name this activity in the LexLint law library, with the number of laws and jurisdictions in each, as of . The examples are chosen by rule, laws in force first and the widest jurisdiction first; each section's page lists every law.

Area of lawLawsJurisdictions
Privacy law

Have a legal basis for personal data, honor people's rights over it, and report a breach.

 372 179
AI law

Tell people when they are dealing with an AI system or its output, and control the uses the law calls high-risk.

 108 51
Cybersecurity law

Build software securely, handle reported flaws, and report incidents on a deadline.

 91 67
Product and AI liability law

Answer in damages when defective software or an AI system causes harm.

 24 22

The decision domains

The kinds of decision with law written for them alone, each with a page that names that law, as of .

DomainLawsJurisdictions
Makes employment decisions 28 17
Makes health care decisions 16 12
Makes housing decisions 14 14
Makes credit decisions 7 6
Makes insurance decisions 6 6
Makes education decisions 2 2
Makes justice decisions 2 2
Makes public services decisions 2 2

Counterparties that usually come with it

  • a credit bureau or background-check provider
  • the vendor of a scoring model

A component that cannot run as documented without one of these names it in its ACTIVITIES.md under talks_to, with required: true. That party's jurisdiction then joins the run of every product that uses the component, and the finding says why it is there. A default the deployer can change is asked about, never added. Talking to a party never makes a product that party.

In a declaration

A library or framework that makes this possible enables it; an application whose shipped code does it performs it.

For a library

activities: - id: high_risk_decisions mentioned: enables enabled: requires_configuration where: [<the module that carries it>] note: <one sentence>

For an application

activities: - id: high_risk_decisions mentioned: performs enabled: by_default where: [<the module that carries it>] note: <one sentence: what it does, and the kind of law it attracts>

History

In the registry since version 1.0, .

In the glossary: Makes high-risk automated decisions.

The activity registry is LexLint's open list; this page's text is licensed under Creative Commons Attribution 4.0.