Qualifying significant decision
Clause 14 DPA specifies the obligations of the controller regarding the automated decision-making. For example, it defines the “qualifying significant decision” as:
- a significant decision concerning a data subject,
- being required or approved by law and
- not falling under Article 22 (2)(a) or (c) of the GDPR (decisions required for a contract or made with the explicit consent of the data subject).
In addition, clause 14 DPA puts further obligations on the person responsible for the data processing.