Regulation (EU) 2016/679 as retained in UK law (UK GDPR) – Article 22D – Further provision about automated decision-making
Articles
Article 22D[F1Further provision about automated decision-making
1. The Secretary of State may by regulations provide that, for the purposes of Article 22A(1)(a), there is, or is not, to be taken to be meaningful human involvement in the taking of a decision in cases described in the regulations.
2. The Secretary of State may by regulations provide that, for the purposes of Article 22A(1)(b)(ii), a description of decision is, or is not, to be taken to have a similarly significant effect for the data subject.
3. The Secretary of State may by regulations make the following types of provision about the safeguards required under Article 22C(1)—
- (a)provision requiring the safeguards to include measures in addition to those described in Article 22C(2),
- (b)provision imposing requirements which supplement what Article 22C(2) requires the safeguards to consist of or include (including, for example, provision about how and when things described in Article 22C(2) must be done or be capable of being done), and
- (c)provision about measures which are not to be taken to satisfy one or more of points (a) to (d) of Article 22C(2).
5. Regulations under this Article are subject to the affirmative resolution procedure.]
Amended text
This Article is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.
Annotations and footnotes
Textual Amendments
- F1 Ch. 3 Section 4A substituted for Art. 22 (19.6.2025 for specified purposes, 5.2.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 80(1), 142(1)(2)(h); S.I. 2026/82, reg. 2(j) (with reg. 5)
https://uk-gdpr.digiphile.law/article/article-22D.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.