Data Protection Act, 2011, automated decision making
Data Protection Act, 2011, s. 51 (automated decision making)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2024. Publisher's page: https://lesotholii.org/akn/ls/act/2012/5/eng@2012-02-22In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Disclosure
As of .
What it requires
- Do not base a decision that has a legal effect on a person, or that significantly affects them, solely on automated processing of their personal information intended to profile their personality or habits, except where taken under a contract at their request or under a law with safeguards in place.
What this law does
Section 51 bars a decision that has a legal effect on a person, or that significantly affects them, from being based solely on automated processing of their personal information intended to profile their personality or habits. The bar does not apply to a decision taken in connection with a contract, where either the data subject's contractual request has been met or appropriate measures let the data subject make representations about the decision.
It also does not apply to a decision governed by a law or code that specifies appropriate measures protecting data subjects' legitimate interests.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.