Loi n° L/2016/037/AN, protection des données à caractère personnel, décisions fondées sur un traitement automatisé
Loi n° L/2016/037/AN, art. 27 (décisions fondées sur un traitement automatisé)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Prohibition
As of .
What it requires
- Do not take an administrative or private decision that assesses a person's behavior with an automated processing of personal data defining their profile or personality as its sole basis (Article 27).
These lines are LexLint's reading of the law's text, as of .
What this law does
Article 27 bars a court decision that assesses a person's behavior from being founded on automated processing of personal data designed to evaluate aspects of their personality, a clause that binds courts only. Article 27 also bars an administrative or private decision that assesses human behavior from having as its sole basis an automated processing of personal data that defines the person's profile or personality.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.