Law No. 2013-450 on the Protection of Personal Data, automated decisions
Loi n° 2013-450, art. 25 (automated individual decisions)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.artci.ci/images/stories/pdf-english/lois_english/loi_2013_450_english.pdfIn force.
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
As of .
What it requires
- Do not base an administrative or private decision assessing a person's behavior or personality solely on automated processing of their personal data.
What this law does
Article 25 bars an administrative or private decision that assesses a person's behavior or personality from resting solely on automated processing of their personal data. A parallel first sentence restricts a court decision the same way, but that clause binds only courts and carries no 'solely' qualifier.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.