The info safety regulation establishes that you've got the correct to not be topic to a decision based mostly exclusively on automatic usually means, if the choice creates lawful outcomes regarding you or substantially affects you in an analogous way. The eu Knowledge Defense Board provides recommendations on the application https://nathanlabsadvisory.com/difc-data-protection-compliance/