Automated decision-making under UK’s data protection law

Qualifying significant decision

Clause 14 DPA specifies the obligations of the controller regarding the automated decision-making. For example, it defines the “qualifying significant decision” as:

  1. a significant decision concerning a data subject,
  2. being required or approved by law and
  3. not falling under Article 22 (2)(a) or (c) of the GDPR (decisions required for a contract or made with the explicit consent of the data subject).

In addition, clause 14 DPA puts further obligations on the person responsible for the data processing.