{"id":193143,"date":"2025-03-27T15:25:20","date_gmt":"2025-03-27T15:25:20","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=193143"},"modified":"2025-03-31T00:57:06","modified_gmt":"2025-03-30T23:57:06","slug":"article-22-uk-gdpr","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/","title":{"rendered":"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making"},"content":{"rendered":"\n<p>Automated decision-making is becoming more common as technologies advance rapidly. However, the UK GDPR regulates automated decision-making, and many businesses find this a challenging area of compliance to navigate. When you make decisions without human involvement, which significantly affect someone\u2019s rights, data protection law imposes strict rules that you must follow. Under Article 22 of the UK GDPR, individuals have the right not to be subject to a decision based solely on automated processing, including profiling, if that decision has legal or similarly significant effects. If you use automated tools to make decisions about staff, customers, or users, you must understand your legal obligations and the protections individuals are entitled to. This article introduces what automated decision-making means and the key rights of individuals concerning Article 22 of the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-protection-act-gdpr-compliance\/\">UK GDPR<\/a> and the relevant <a href=\"https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/individual-rights\/automated-decision-making-and-profiling\/\">ICO guidance<\/a>.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is the Purpose of Article 22?<\/h2>\n\n\n\n<p>Under Article 22 of the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-gdpr-compliant\/\">UK GDPR<\/a>, individuals have the right not to be subject to a decision based solely on automated processing, including profiling, if that decision has legal or similarly significant effects. Suppose you use automated systems to make decisions about individuals, such as staff or customers. In that case, you must always consider how those decisions align with the fundamental principles of the UK GDPR &#8211;&nbsp; in particular, the principle of transparency.<\/p>\n\n\n\n<p>Automated individual decision-making means making a decision without any meaningful human involvement. This includes making decisions using technology, algorithms, or machine learning tools without a person reviewing or changing the outcome.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Examples<\/h3>\n\n\n\n<p>Examples include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>automatically refusing a credit application; and<\/li>\n\n\n\n<li>using online test scores to shortlist job applicants.<\/li>\n<\/ul>\n\n\n\n<p>This does not include processes where someone meaningfully reviews the outcome and can change it.<\/p>\n\n\n\n<p>Profiling is often used in these systems \u2013 this can involve analysing someone\u2019s behaviour, preferences, or characteristics to predict how they may act. Profiling alone is not banned, but if it forms part of a solely automated decision with legal or similarly significant effects, the Article 22 rules apply. The purpose of Article 22 is to ensure fairness and accountability in how you use technology to make decisions about individuals. It protects people from significant decisions made entirely by machines unless you put suitable safeguards in place.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Does Article 22 Require?<\/h2>\n\n\n\n<p>Article 22 restricts decisions made solely by automated means with legal or similarly significant effects on individuals. A decision is solely automated when a machine makes it without meaningful human involvement. If someone in your business reviews and can change the decision, then the rules on solely automated decisions do not apply. Token review is insufficient, though &#8211; the person must have real authority to intervene and adjust the outcome.<\/p>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p>A legal effect is something that impacts a person\u2019s legal status or rights, e.g. being denied a benefit. A similarly significant effect includes decisions that affect someone\u2019s financial position or employment opportunities.<\/p>\n<\/div>\n\n\n\n<p>This definition can be complex to determine in practice, so you should take legal advice if you are unsure whether your business activities could fall within the scope of the Article 22 restriction.&nbsp;<\/p>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/193143#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>LinkedIn<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193143' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='covBCEsyrtjPP28VjLmZJhdglBUER+UUxcOJn07RO0fMH44Axa5WkBFfUYSChFugCPmJ7jZX9PcHRZ7i5f7h\/JXfFThfKsrA0Qkyj9tkl1xwn6Q=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">What are the Rights of Individuals?<\/h2>\n\n\n\n<p>Under Article 22 of the UK GDPR, individuals have the right not to be subject to a decision based solely on automated processing, including profiling, if that decision has legal or similarly significant effects. This right applies when you make decisions without any meaningful human involvement.<\/p>\n\n\n\n<p>You can only make this type of decision if one of the following exceptions applies:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the decision is necessary for entering into or performing a contract with the individual;&nbsp;<\/li>\n\n\n\n<li>UK law authorises or requires the decision and provides safeguards; and&nbsp;<\/li>\n\n\n\n<li>the individual has given their explicit consent.<\/li>\n<\/ul>\n\n\n\n<p>If you rely on one of these exceptions, you must take specific steps to protect the individual\u2019s rights.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Examples<\/h3>\n\n\n\n<p>These include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>telling the individual that you use solely automated decision-making;&nbsp;<\/li>\n\n\n\n<li>explaining what data you use, how the decision is made, and what the likely consequences are; and&nbsp;<\/li>\n\n\n\n<li>giving the individual the right to request human intervention, express their views, and contest the decision<\/li>\n<\/ul>\n\n\n\n<p>Legal protections are in place to ensure that individuals remain informed and have a way to challenge or change automated decisions that could significantly impact them.<\/p>\n\n\n\n<p>You must build these rights into your processes and ensure that you regularly review your systems for accuracy, bias, and fairness.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which Other Data Protection Law Rules Apply?<\/h2>\n\n\n\n<p>Article 22 is a complex area with strict legal requirements. You should assess whether your decision-making systems fall within its scope. In addition to the rights of individuals, you must meet a range of other obligations when you carry out solely automated decision-making.<\/p>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p>For example, you will need to carry out a data protection impact assessment (<strong>DPIA<\/strong>) to identify risks to individuals and set out how you will mitigate them. You must document your lawful basis and regularly review your systems for accuracy and bias to inform your design and ensure ongoing compliance. Additional complex rules apply when using special category data (such as health or ethnicity).<\/p>\n<\/div>\n\n\n\n<p>Even if your processing falls outside of Article 22, you still must follow broader data protection principles such as transparency, fairness, accuracy, and minimisation. <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/ongoing-legal-advice-uk-gdpr-compliance\/\">Legal advice from a data protection lawyer<\/a> can help you identify and comply with your obligations and ensure your activities align with the UK GDPR requirements.&nbsp;<\/p>\n\n\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001038\/uk-gdpr-factsheet.jpg\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">GDPR Essentials Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet sets out how your business can become GDPR compliant.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001020\/LegalVision-UK-GDPR-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<p>If you use systems that make significant decisions about individuals without human involvement, your business should assess and comply with Article 22 of the UK GDPR where required. Article 22 of the UK GDPR sets out complex rules which can be challenging for a business to navigate. For example, rules around giving individuals the chance to object to automated decision-making in certain circumstances. If you are unsure about your obligations, you should take legal advice from a data protection solicitor to help avoid risk.&nbsp;<\/p>\n\n\n\n<p>If you need help reviewing your UK GDPR compliance, our experienced <a href=\"https:\/\/legalvision.co.uk\/services\/data-privacy-it-lawyers\/\">privacy lawyers<\/a> can assist as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers to answer your questions and draft and review your documents. Call us today on <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or visit our <a href=\"https:\/\/legalvision.co.uk\/membership\/\">membership page<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1743088999459\"><strong class=\"schema-faq-question\"><strong>What does Article 22 of the UK GDPR say?<\/strong><\/strong> <p class=\"schema-faq-answer\">It gives individuals the right not to be subject to a decision based solely on automated processing if the decision has legal or similarly significant effects. You can only carry out this kind of processing if certain exceptions apply and you put appropriate safeguards in place.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1743089006403\"><strong class=\"schema-faq-question\"><strong>Why should I take legal advice on automated decision-making?<\/strong><\/strong> <p class=\"schema-faq-answer\">Automated decision-making is a legally complex area. You must assess whether Article 22 applies and ensure your systems comply with strict legal advice. Legal advice can help you meet your obligations, reduce risk, and build appropriate safeguards in your processes to help avoid the risk of non-compliance.<\/p> <\/div> <\/div>\n\n\n\n<p>&nbsp;<\/p>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"9eb4f72322\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/193143\" \/>            <input value=\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Automated decision-making is becoming more common as technologies advance rapidly. However, the UK GDPR regulates automated decision-making, and many businesses find this a challenging area of compliance to navigate. When you make decisions without human involvement, which significantly affect someone\u2019s rights, data protection law imposes strict rules that you must follow. Under Article 22 of<a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\">Continue reading <span class=\"sr-only\">&#8220;Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13436,"featured_media":191827,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[27],"tags":[20,746,798,2431],"class_list":["post-193143","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-small-business","tag-ico","tag-data-protection-rules","tag-article-22"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Article 22 UK GDPR: Automated Decision-Making | LegalVision UK<\/title>\n<meta name=\"description\" content=\"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Article 22 UK GDPR: Automated Decision-Making | LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-27T15:25:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-30T23:57:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sej Lamba\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sej Lamba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\"},\"author\":{\"name\":\"Sej Lamba\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"headline\":\"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making\",\"datePublished\":\"2025-03-27T15:25:20+00:00\",\"dateModified\":\"2025-03-30T23:57:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\"},\"wordCount\":1045,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg\",\"keywords\":[\"small business\",\"ICO\",\"data protection rules\",\"Article 22\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\",\"url\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\",\"name\":\"Article 22 UK GDPR: Automated Decision-Making | LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg\",\"datePublished\":\"2025-03-27T15:25:20+00:00\",\"dateModified\":\"2025-03-30T23:57:06+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"description\":\"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743088999459\"},{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743089006403\"}],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg\",\"width\":2000,\"height\":1500,\"caption\":\"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\",\"name\":\"Sej Lamba\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"caption\":\"Sej Lamba\"},\"description\":\"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/sejlamba\/\"],\"url\":\"https:\/\/legalvision.co.uk\/author\/sehajlamba\/\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743088999459\",\"name\":\"What does Article 22 of the UK GDPR say?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"It gives individuals the right not to be subject to a decision based solely on automated processing if the decision has legal or similarly significant effects. You can only carry out this kind of processing if certain exceptions apply and you put appropriate safeguards in place.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743089006403\",\"name\":\"Why should I take legal advice on automated decision-making?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Automated decision-making is a legally complex area. You must assess whether Article 22 applies and ensure your systems comply with strict legal advice. Legal advice can help you meet your obligations, reduce risk, and build appropriate safeguards in your processes to help avoid the risk of non-compliance.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Article 22 UK GDPR: Automated Decision-Making | LegalVision UK","description":"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/","og_locale":"en_GB","og_type":"article","og_title":"Article 22 UK GDPR: Automated Decision-Making | LegalVision UK","og_description":"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0","og_url":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2025-03-27T15:25:20+00:00","article_modified_time":"2025-03-30T23:57:06+00:00","og_image":[{"width":2000,"height":1500,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg","type":"image\/jpeg"}],"author":"Sej Lamba","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Sej Lamba","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/"},"author":{"name":"Sej Lamba","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"headline":"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making","datePublished":"2025-03-27T15:25:20+00:00","dateModified":"2025-03-30T23:57:06+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/"},"wordCount":1045,"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg","keywords":["small business","ICO","data protection rules","Article 22"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-GB"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/","url":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/","name":"Article 22 UK GDPR: Automated Decision-Making | LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg","datePublished":"2025-03-27T15:25:20+00:00","dateModified":"2025-03-30T23:57:06+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"description":"This article explores what automated decision-making means and the key rights of individuals concerning Article 22 of the UK GDPR.\u00a0","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743088999459"},{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743089006403"}],"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06043726\/pexels-kevin-ku-92347-577585.jpg","width":2000,"height":1500,"caption":"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/"},{"@type":"ListItem","position":3,"name":"Article 22 UK GDPR: Rights and Obligations in Automated Decision-Making"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838","name":"Sej Lamba","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","contentUrl":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","caption":"Sej Lamba"},"description":"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.","sameAs":["https:\/\/www.linkedin.com\/in\/sejlamba\/"],"url":"https:\/\/legalvision.co.uk\/author\/sehajlamba\/"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743088999459","name":"What does Article 22 of the UK GDPR say?","acceptedAnswer":{"@type":"Answer","text":"It gives individuals the right not to be subject to a decision based solely on automated processing if the decision has legal or similarly significant effects. You can only carry out this kind of processing if certain exceptions apply and you put appropriate safeguards in place.","inLanguage":"en-GB"},"inLanguage":"en-GB"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/article-22-uk-gdpr\/#faq-question-1743089006403","name":"Why should I take legal advice on automated decision-making?","acceptedAnswer":{"@type":"Answer","text":"Automated decision-making is a legally complex area. You must assess whether Article 22 applies and ensure your systems comply with strict legal advice. Legal advice can help you meet your obligations, reduce risk, and build appropriate safeguards in your processes to help avoid the risk of non-compliance.","inLanguage":"en-GB"},"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13436"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=193143"}],"version-history":[{"count":2,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193143\/revisions"}],"predecessor-version":[{"id":193195,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193143\/revisions\/193195"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/191827"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=193143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=193143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=193143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}