Makes public services decisions, in Benin

Loi n°2017-20 du 20 avril 2018, Livre V, arts. 399-400, 415-423, 437-445 et 447 (droits des personnes concernées) · Read the law's page

• Respond to a data subject's request to access, rectify, or object to the processing of their personal data, and pass on any correction to any third party the data was disclosed to.
• Tell a data subject, no later than when you collect their personal data, your identity, the purposes of the processing, the recipients, whether automated decision making is in use, how long you will keep the data, and their rights of access, rectification, erasure, and objection.
• Where personal data was not collected from the data subject, give them the same information within a reasonable time and at most thirty days after obtaining it, or at the first communication or disclosure of the data if that comes sooner.
• Give a data subject their personal data in a structured, commonly used, machine readable format on request, and let them transmit it to another controller without obstruction, where the processing rests on consent or a contract and is carried out by automated means.
• Let a data subject object at any time, on legitimate grounds, to the processing of their personal data, and let them object free of charge and without any justification to processing for direct marketing, charitable, or political prospecting.
• Correct, complete, update, block, or erase personal data on a data subject's request where it is inaccurate, incomplete, ambiguous, outdated, irrelevant, or unlawfully processed, and pass the correction or erasure on to anyone the data was disclosed to.
• Where you made a data subject's personal data public, take reasonable steps, including technical measures, to tell any third party processing that data that the data subject has asked for it to be erased.
• Let an incapacitated adult's rights be exercised by their cohabiting spouse or partner, or in order, an adult child, a parent, or a sibling, or a court appointed guardian, and involve the data subject as far as their understanding allows.

Loi n°2017-20 du 20 avril 2018, Livre V, arts. 401 et 437 (automated individual decisions) · Read the law's page

• Do not base a decision that produces legal effects for a person, or otherwise significantly affects them, solely on automated processing, including profiling, and disclose the underlying logic and the significance and consequences of such processing when the person asks.