Articles
Article 22C[F1Safeguards for automated decision-making
- (a)based entirely or partly on personal data, and
- (b)based solely on automated processing,
the controller must ensure that safeguards for the data subject’s rights, freedoms and legitimate interests are in place which comply with paragraph 2 and any regulations under Article 22D(3).
- (a)provide the data subject with information about decisions described in paragraph 1 taken in relation to the data subject;
- (b)enable the data subject to make representations about such decisions;
- (c)enable the data subject to obtain human intervention on the part of the controller in relation to such decisions;
- (d)enable the data subject to contest such decisions.]
Amended text
This Article is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.
Annotations and footnotes
Textual Amendments
- F1 Ch. 3 Section 4A substituted for Art. 22 (19.6.2025 for specified purposes, 5.2.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 80(1), 142(1)(2)(h); S.I. 2026/82, reg. 2(j) (with reg. 5)
https://uk-gdpr.digiphile.law/article/article-22C.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.