Data Protection Act, 2020, automated decision-taking
Data Protection Act, 2020 (Act 7 of 2020), ss. 6(2)(d) and 12 (automated decision-taking)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Disclosure
As of .
What it requires
- Stop basing a decision that significantly affects a person solely on the automatic processing of their personal data used to evaluate matters such as performance at work, creditworthiness, reliability or conduct, once that person gives you written notice.
- Inform a person as soon as is reasonably practicable where you took such a decision without having received that notice, and give them a written statement within 30 days of the steps you will take where they require you to reconsider it.
- Explain to the data subject, on payment of the prescribed fee, the logic involved in automatic processing that is or is likely to be the sole basis for a decision significantly affecting them.
What this law does
Section 12 entitles an individual at any time, by notice in writing, to require a data controller to ensure that no decision significantly affecting them is based solely on the processing by automatic means of personal data used to evaluate matters such as their performance at work, creditworthiness, reliability or conduct.
Where such a decision is taken without that notice the data controller must inform the individual as soon as is reasonably practicable, the individual may then require reconsideration or a fresh decision within thirty days, and the data controller must give a written statement of the steps it intends to take within thirty days of that notice.
Section 6 also entitles a data subject, on payment of the prescribed fee, to be informed of the logic involved in automatic processing that has constituted or is likely to constitute the sole basis for a decision significantly affecting them. The Act has been in force since , the day the Government of Jamaica confirmed as the Act's implementation date.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.