AlbaniaLaw No. 124/2024, automated decisions
Law No. 124/2024, art. 20 (automated individual decisions)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
As of .
What it requires
- Give a data subject the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly serious effects, unless a listed exception applies, and where an exception does apply, let them obtain human intervention, express their view, and contest the decision.
What this law does
Article 20(1) gives the data subject the right not to be subject to a decision based solely on automated processing of their data, including profiling, that produces legal effects or similarly serious effects on them. Paragraph 2 lists exceptions, including where the decision is necessary for entering into or performing a contract. Where an exception applies, the controller must give the data subject the right to obtain human intervention, express their point of view, and contest the decision.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.