A GDPR Data Protection Officer reviews an AI system that uses automated profiling to determine insurance premiums. Which GDPR right is MOST directly implicated?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — if an AI system sets insurance premiums using automated profiling, you're looking at Article 22. It gives people the right not to be subject to solely automated decisions with legal or similarly significant effects, and premiums definitely have significant financial effects.
Full Explanation
The right not to be subject to solely automated decision-making with significant effects under Article 22 is correct because Article 22 GDPR grants individuals the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. Insurance premium determination has significant financial effects, directly triggering Article 22 protections including the right to human review, to express one's point of view, and to obtain an explanation. The right to data portability under Article 20, the right to erasure under Article 17, and the right to restrict processing under Article 18 are important rights, but they are not the primary right implicated by automated profiling with significant effects.