A company processes personal data using AI to make automated decisions about individual credit eligibility. Under GDPR, what right allows individuals to obtain a human review of the decision?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — GDPR Article 22 is the one that covers solely automated decisions with legal or similarly significant effects, so you can demand human review and contest the decision. Data portability, restriction, and erasure don't give you that credit-decision review.
Full Explanation
The right not to be subject to solely automated decision-making with human review recourse (Article 22) is correct because GDPR Article 22 specifically addresses automated individual decision-making, giving individuals the right not to be subject to solely automated decisions with legal or similarly significant effects, and requiring controllers to implement safeguards including the right to obtain human intervention and contest decisions. The right to data portability (Article 20) relates to receiving personal data in portable format. The right to restriction of processing (Article 18) restricts how data is processed. The right to erasure (Article 17) is the right to be forgotten.