Personal Data Protection Law (KVKK), objection to a result of solely automated analysis
In force since .
A data subject rights rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app must let a person in Turkey object to a result against them that arises from analysis of their data solely through automated systems.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What record it asks for
Logging duty
Article 11(1)(g) gives the data subject the right to object to a result against them that comes from analysis of their data solely through automated systems. It names no record of the automated analysis, no log, no retention period and no inspector, and the procedure for requests (Article 13) is not cited by this row.
- Kind
- None
- As of
What this law does
Article 11(1)(g) gives a data subject the right to object to a result against them that arises from the analysis of their data processed solely through automated systems.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .