CJEU landmark ruling on the legality of auto credit ranking and review of DPAs

noyb.eu

4 pointsfariszr3 comments

For reference, article 22, paragraph 1 of GDPR:

"The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her."

This is big because it has a direct and explicit linkage to AI (and also the forthcoming AI Act). Previously, many academics assumed that Art. 22 was difficult to enforce, especially due to the wording of "produces legal effects concerning him or her or similarly significantly affects him or her". Note that most public sector AI-decisions have explicit legal effects to data subjects.

> the court ruled that the assignment of automatically calculated credit scores is not in line with the GDPR.

IMO The biggest point in the article, that's why I modified the title a bit.

Reply on news.ycombinator.com