Makes high-risk automated decisions, in Botswana

Data Protection Act, 2024 (Act No. 18 of 2024), Part VIII (ss. 37-48) · Read the law's page

• Provide a data subject, on request, with confirmation of whether their personal data is being processed, and where it is, access to it and to information on the purpose of processing, the categories of data, the recipients, the retention period, and the existence of automated decision-making, including profiling.
• Act on a data subject's request to rectify, erase, restrict the processing of, port, or object to the processing of their personal data, and inform the data subject of the outcome without undue delay and, in any event, within one month of receipt of the request, extendable by up to two further months with the Commission's approval.

Data Protection Act, 2024 (Act No. 18 of 2024), s. 49 (automated individual decisions) · Read the law's page

• Do not base a decision that produces legal effects concerning a person, or significantly affects them, solely on automated processing, including profiling, unless a listed exception applies, and where one does, let the person obtain human intervention, express their point of view, and contest the decision.