Law / Kiribati

Data Protection Act 2025, automated decisions

Data Protection Act 2025, s. 17 (right not to be subject to a decision based solely on automated processing)

A data subject rights rule binding public and private bodies.

Obligation class: Data subject rights, Disclosure

As of 26 September 2026.

What it requires

This Act is enacted but not in force: section 2 leaves commencement to a ministerial notice, and none was located as of this review, so a data subject's rights and the information notice duty do not bind anyone yet.
On commencement, do not subject a data subject to a decision based solely on automated processing of personal data that produces a legal or similarly significant effect on them, unless the decision is necessary to a contract with them, authorised by a law with suitable safeguards, or authorised by their consent.

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

This Act is enacted but not in force: section 2 leaves commencement to a ministerial notice, and none was located as of this review, so section 17 does not bind anyone yet.

On commencement, section 17 will give a data subject the right not to be subject to a decision based solely on automated processing of personal data that produces a legal or similarly significant effect on them, except where the decision is necessary to a contract with them, authorised by a written law with suitable safeguards, or authorised by their consent.

When LexLint raises it

When your app profile says your app makes high-risk automated decisions.

Back to the example · Lint your app