UK GDPR Article 22 — Automated Decision-Making

UK GDPR, Article 22 · Last reviewed 2 weeks ago

Rights regarding solely automated decisions with legal or similarly significant effects.

In plain English

In the UK, decisions made about you solely by a machine that have a legal or similarly significant effect are restricted. You can usually ask for human review, an explanation, and a way to contest the decision.

What this means for consumers

UK residents can challenge purely automated decisions and ask for human review.

Related regulations

🇩🇪 Germany · Enacted
EU AI Act
The world's first comprehensive horizontal AI law, imposing risk-based obligations across the EU.
🇺🇸 United States · Enacted
Colorado AI Act
First comprehensive US state AI law targeting consequential decisions; effective in 2026.
🇺🇸 United States · Guidance
NIST AI RMF
Voluntary US framework for managing AI risks across the life cycle (Govern, Map, Measure, Manage).
🇺🇸 United States · Enacted
NYC AEDT Law
Requires independent bias audits and candidate notice for automated employment decision tools used in NYC.