An organization processes personal data using AI systems for targeted advertising. Under GDPR, what is the MOST important compliance requirement when using solely automated decision-making that produces legal or similarly significant effects on individuals?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because GDPR Article 22 requires that organizations not subject individuals to solely automated decisions producing legal or similarly significant effects unless specific safeguards apply, including the right to human review, the right to express one's point of view, and the right to contest the decision. A is a general security obligation, not specific to automated decision-making.
Full explanation below image
Full Explanation
B is correct because GDPR Article 22 requires that organizations not subject individuals to solely automated decisions producing legal or similarly significant effects unless specific safeguards apply, including the right to human review, the right to express one's point of view, and the right to contest the decision. A is a general security obligation, not specific to automated decision-making. C is not required by GDPR. D relates to different legislation.