EUGDPRData Subject RightsEASYFree question
Article 22 gives data subjects the right not to be subject to:
- A.Processing by government authorities, per Article 8's provisions on children, which apply to every data subject right regardless of the individual's age
- B.Manual processing of their data, and GDPR applies only to organisations headquartered in the Union
- C.Any form of data collection
- D.Decisions based solely on automated processing that produce legal or similarly significant effects
Why D is correct
Article 22 provides the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects.
Know someone studying for GDPR? Send them this one.