FranceGDPR Article 22, Right Against Automated Individual Decision-Making
Regulation (EU) 2016/679, Art. 22
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 25 May 2018.
A data subject rights rule binding public and private bodies.
As of 24 August 2026.
What it requires
- Give a person in France a path to obtain human intervention, express their view, and contest a decision made solely by automated processing, including profiling, that produces a legal or similarly significant effect on them.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Individuals in France have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, unless a contract, explicit consent, or an EU or French law exception applies.
This sits alongside the general General Data Protection Regulation (GDPR) Articles 12-23 rights of access, rectification, erasure, restriction, portability, and objection, all enforceable through the Member State's supervisory authority; France's designated supervisory authority is the CNIL, a designation made by French domestic law rather than by the Regulation text itself.
When LexLint raises it
high_risk_decisionsdeploys_chatbot
Read the law
Official Journal text, EUR-Lex, Regulation (EU) 2016/679
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.