RomaniaGDPR Article 22, Automated Decisions in Romania
Regulation (EU) 2016/679, Art. 22
In force since .
A data subject rights rule binding public and private bodies.
As of .
What it requires
- Give a person in Romania a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
What this law does
General Data Protection Regulation (GDPR) Article 22 gives a person in Romania the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them, unless the decision is necessary for a contract with them, authorised by a law that safeguards their rights, or based on their explicit consent.
Where it rests on a contract or consent, the controller must at least let the person obtain human intervention, express their point of view and contest the decision. Legea nr. 190/2018 adds no rule of its own on automated decisions.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.