Loi n° 2017-020 du 22 juillet 2017, automated decisions
Loi n° 2017-020 du 22 juillet 2017, art. 19 (automated individual decisions)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
As of .
What it requires
- Do not base a decision producing legal effects for a person solely on automated profiling or an automated evaluation of their personality.
What this law does
Article 19's second sentence bars any decision that produces legal effects for a person from resting solely on automated processing of personal data designed to profile the person or evaluate aspects of their personality. A first sentence in the same article separately and unconditionally bars a judicial decision assessing a person's conduct from resting on that kind of processing at all; that sentence binds courts only and does not reach a private controller, so it is not part of this right.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.