A lender uses solely automated decision-making that produces legal effects for credit applicants, but its privacy notice is silent on that practice. What information is missing?
Select an answer to reveal the explanation.
Short Explanation
If a machine alone can change someone's legal or similarly significant situation, say so in the notice—and give meaningful logic, not a black box shrug. Silence on ADM is a transparency miss.
Full Explanation
Articles 13(2)(f) and 14(2)(g), read with Article 22, require controllers to inform data subjects about the existence of automated decision-making, including profiling, that produces legal or similarly significant effects, and to provide meaningful information about the logic involved as well as significance and envisaged consequences. Cosmetic email details, affidavits promising no human review, or banking directory data do not satisfy that duty.