S.L. 586.8 Art. 11Automated individual decision-making.

(1) A decision based solely on automated processing, including profiling, which produces an adverse legal effect concerning the data subject or significantly affects him, shall be prohibited unless authorised by a law to which the controller is subject and which provides appropriate safeguards for the rights and freedoms of the data subject, at least the right to obtain human intervention on the part of the controller.

(2) Decisions referred to in sub-regulation (1) shall not be based on special categories of personal data referred to in regulation 10, unless suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place.

(3) Profiling that results in discrimination against natural persons on the basis of special categories of personal data referred to in regulation 10 shall be prohibited.