Makes housing decisions, in Romania

Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22 · Read the law's page

• Give a person in Romania a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
• Do not subject a person in Romania to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
• Do not base a solely automated decision with legal or similarly significant effects on a person in Romania on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
• If you make solely automated decisions about a person in Romania of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).

Regulation (EU) 2016/679, Art. 9; Legea nr. 190/2018, automated decision-making and national identification number provisions · Read the law's page

• Obtain explicit consent or express legal authorization, with adequate protective measures, before using genetic, biometric, or health data of a person in Romania to drive an automated decision or profile.
• If you rely on legitimate interests to process a Romanian national identification number, put in place appropriate technical and organizational measures, appoint a Data Protection Officer, set specific retention terms with deletion or review deadlines, and train staff periodically.

Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024

• Disclose AI involvement to users when deploying an AI chatbot or a deepfake-generating system.
• Provide transparency about the training data used for general-purpose AI models.
• Complete a conformity assessment for a high-risk AI system used in employment, essential services, law enforcement or public administration.
• Maintain human oversight of a high-risk AI system used in employment, essential services, law enforcement or public administration.
• Keep records for a high-risk AI system used in employment, essential services, law enforcement or public administration.