Law No. 29-2019, automated decisions
Loi n° 29-2019, art. 13 (automated individual decisions)
In force.
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- Do not base a decision producing legal effects for a person solely on automated processing intended to define their profile or evaluate aspects of their personality, unless the decision arises from concluding or performing a contract on which the person had a chance to comment, or it grants their own request.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.5Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.
- NIST Privacy Framework
- CT.DM-P10Stakeholder privacy preferences are included in algorithmic design objectives and outputs are evaluated against these preferences.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What record it asks for
Logging duty
Article 13 bars a court decision assessing a person's behavior, and any decision with legal effects on a person, from resting solely on automated processing meant to profile the person or assess aspects of their personality, with an exception for decisions taken in concluding or performing a contract where the person could present observations, and decisions that grant the person's own request. It sets no duty to keep a log, record or explanation of the automated decision, and gives no body a power to demand one.
- Kind
- None
- As of
What this law does
Article 13 bars a decision producing legal effects for a natural person from resting solely on automated processing intended to define the person's profile or evaluate aspects of their personality. A parallel first sentence restricts a court decision the same way, but that clause binds only courts. The prohibition does not apply to a decision made in concluding or performing a contract on which the person had a chance to comment, or to a decision that grants the person's own request. No source stating the day on which the Law came into force has been located.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .