An automated individual decision is a decision based solely on automated processing of personal data that produces legal effects concerning the data subject or similarly significantly affects the data subject. The GDPR ensures that such decisions may only be taken under certain conditions in order to protect the rights and freedoms of the data subjects.
