NIST Privacy Framework, Communicate-PCM.AW-P3

Do not base a decision that produces legal effects for a person, or otherwise significantly affects them, solely on automated processing, including profiling, and disclose the underlying logic and the significance and consequences of such processing when the person asks.

Provide, on request, clear and adequate information about the criteria and procedures used for an automated decision, subject to trade and industrial secrecy.

Tell a data subject, on request, the information and reasoning behind a decision, automated or not, applied against them.

On request, give a person access to their data and to information about how any automated decision producing legal effects for them was reached, so they can understand and contest it.

Let a data subject obtain, at any time and without restriction, information about how an artificial intelligence system is processing their personal data.

Disclose to a data subject, on request, the logic underlying an automated decision taken about them under Article 65 and the significance and expected consequences of that processing.

If you are a French public-sector body that takes an individual administrative decision about a person solely by automated processing, keep control of the algorithmic processing and its changes so you can explain to the person, in detail and in a form they can follow, how it was applied to them, under Loi 78-17 Article 47.

Offer a Minnesota consumer the right to opt out of automated profiling in furtherance of decisions with legal or similarly significant effects, question the result, receive an explanation, and have the decision reevaluated if based on inaccurate data.

Tell a data subject the logic involved where automatic evaluation of matters relating to them is, or is likely to be, the sole basis of a decision significantly affecting them.

As a motor vehicle manufacturer selling or leasing vehicles in Utah, once in effect, provide in-vehicle privacy controls letting a consumer view what personal data categories the vehicle collects and shares, opt out of sale or targeted-advertising processing, and delete readily accessible data stored locally on the vehicle.

Give a child an obvious signal when the child's parent, guardian, or another consumer is monitoring the child's online activity or tracking the child's location.

Do not collect, sell, or share a child's precise geolocation by default, and give the child an obvious sign for as long as precise geolocation is being collected.

Give a covered child or covered minor a prominent and constant real-time signal when precise geolocation information is collected or used or when their online activity is monitored by any individual, including a parent.

Do not monitor a minor or track their location without signaling it to them.