GDPR Article 22, Automated Decisions in Slovakia
Regulation (EU) 2016/679, Art. 22; Zákon č. 18/2018 Z. z., § 28
In force since .
A data subject rights rule binding public and private bodies.
As of .
What it requires
- Give a person in Slovakia a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
What this law does
General Data Protection Regulation (GDPR) Article 22 gives a person in Slovakia the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them, unless the decision is necessary for a contract with them, authorised by a law that safeguards their rights, or based on their explicit consent.
Where it rests on a contract or consent, the controller must at least let the person obtain human intervention, express their point of view and contest the decision. Section 28 of Act No. 18/2018 Z. z. restates this rule without adding an authorisation or safeguard.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.