A GDPR Data Protection Officer reviews an AI system that uses automated profiling to determine insurance premiums. Which GDPR right is MOST directly implicated?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Article 22 GDPR grants individuals the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. Insurance premium determination has significant financial effects, directly triggering Article 22 protections including the right to human review, to express one's point of view, and to obtain an explanation.
Full explanation below image
Full Explanation
B is correct because Article 22 GDPR grants individuals the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. Insurance premium determination has significant financial effects, directly triggering Article 22 protections including the right to human review, to express one's point of view, and to obtain an explanation. Data portability (A), erasure (C), and restriction (D) are important rights but are not the primary right implicated by automated profiling with significant effects.