TanzaniaPersonal Data Protection (Collection and Processing) Regulations, automated decision making
Personal Data Protection (Personal Data Collection and Processing) Regulations 2023 (GN No. 449C of 2023), reg. 19 (rights in relation to automated decision making)
In force since .
A data subject rights rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Data subject rights, Disclosure
As of .
What it requires
- This binds a data controller or data processor that takes a decision significantly affecting a data subject solely by automatic means.
- Notify the data subject in writing about the processing, stating basic information about it and its intended purpose, the effects likely to arise and how they will be handled, how the personal data are stored, and their right to object to the use of their personal data in commercial advertisements (regulation 19(1) and (2)).
- Respect the data subject's right to reject the use of their personal data in the decision made by automatic means (regulation 19(3)).
These lines are LexLint's reading of the law's text, as of .
What this law does
Where a decision that significantly affects a data subject is based solely on processing by automatic means, the controller or processor must notify the data subject in writing about the processing. The notification must state, among other things, basic information about the processing and its intended purpose, the effects likely to arise and how they will be handled, and the data subject's right to object to the use of their personal data in commercial advertisements. The data subject has the right to reject the use of their personal data in a decision made by automatic means.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.