/Docs/G/EU-GDPR-Law-CmA/Sec/Article/22.md
  Source views: Source JSON(ish) on GitHub (VSCode)   Doc views: Document (&k=r00t): Visual Print Technical: OpenParameters Xray
Ti = Article 22 - Automated individual decision-making, including {_profiling}
1.sec = The {_data_subject} shall have the right not to be subject to a decision based solely on automated {_processing}, including {_profiling}, which produces legal effects concerning him or her or similarly significantly affects him or her.
2.0.sec = Paragraph 1 shall not apply if the decision:
2.1.sec = is necessary for entering into, or performance of, a contract between the {_data_subject} and a data {_controller};
2.2.sec = is authorised by Union or Member State law to which the {_controller} is subject and which also lays down suitable measures to safeguard the {_data_subject}'s rights and freedoms and legitimate interests; or
2.3.sec = is based on the {_data_subject}'s explicit {_consent}.
2. = [G/Z/ol-a/s3]
3.sec = In the cases referred to in points (a) and (c) of paragraph 2, the data {_controller} shall implement suitable measures to safeguard the {_data_subject}'s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the {_controller}, to express his or her point of view and to contest the decision.
4.sec = Decisions referred to in paragraph 2 shall not be based on special categories of {_personal_data} referred to in Article 9(1), unless point (a) or (g) of Article 9(2) apply and suitable measures to safeguard the {_data_subject}'s rights and freedoms and legitimate interests are in place.
= [G/Z/ol/s4]