Personal Data Protection and Privacy Act, 2025, automated decision-making
Personal Data Protection and Privacy Act, 2025, automated decision-making
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
As of .
What it requires
- Do not base a decision that produces legal effects for a person, or otherwise significantly affects them, solely on automated processing, including profiling.
What this law does
A data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them. The Gambia has enacted the Personal Data Protection and Privacy Act, 2025. The Information Commission and the Ministry of Information conducted community sensitisation sessions on the newly enacted Act in November 2025.
The review records the Act as enacted and names no date on which it comes into operation, so the day its duties begin to bind is not established.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.