Law No. 2013-450 on the Protection of Personal Data, automated decisions
Loi n° 2013-450, art. 25 (automated individual decisions)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.artci.ci/images/stories/pdf-english/lois_english/loi_2013_450_english.pdfIn force.
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- Do not base an administrative or private decision assessing a person's behavior or personality solely on automated processing of their personal data.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.5Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.
- NIST Privacy Framework
- CT.DM-P10Stakeholder privacy preferences are included in algorithmic design objectives and outputs are evaluated against these preferences.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What record it asks for
Logging duty
Article 25 bars a court decision, and an administrative or private decision, that assesses a person's behavior or personality from resting on automated processing of personal data. It does not require the decision-maker to keep a record of the decision, an explanation or the inputs, and it names no audit and no party who may demand one. The section carries no territorial clause, so the hook is empty.
- Kind
- None
- As of
What this law does
Article 25 bars an administrative or private decision that assesses a person's behavior or personality from resting solely on automated processing of their personal data. A parallel first sentence restricts a court decision the same way, but that clause binds only courts and carries no 'solely' qualifier. No commencement notice for the Act has been located in the Official Gazette.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .