Law / Côte d'Ivoire

Law No. 2013-450 on the Protection of Personal Data, automated decisions

Loi n° 2013-450, art. 25 (automated individual decisions)

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.artci.ci/images/stories/pdf-english/lois_english/loi_2013_450_english.pdf

In force.

A data subject rights rule binding public and private bodies.

Obligation class
Data subject rights
Audit expectation
none

What it requires

  • Do not base an administrative or private decision assessing a person's behavior or personality solely on automated processing of their personal data.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 3.5Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.
NIST Privacy Framework
  • CT.DM-P10Stakeholder privacy preferences are included in algorithmic design objectives and outputs are evaluated against these preferences.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

What record it asks for

Logging duty

Article 25 bars a court decision, and an administrative or private decision, that assesses a person's behavior or personality from resting on automated processing of personal data. It does not require the decision-maker to keep a record of the decision, an explanation or the inputs, and it names no audit and no party who may demand one. The section carries no territorial clause, so the hook is empty.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 25 bars an administrative or private decision that assesses a person's behavior or personality from resting solely on automated processing of their personal data. A parallel first sentence restricts a court decision the same way, but that clause binds only courts and carries no 'solely' qualifier. No commencement notice for the Act has been located in the Official Gazette.

When LexLint raises it

When your app profile says your app makes high-risk automated decisions.

Back to the example  ·  Lint your app

Page updated .