An automated individual decision is a decision based solely on automated processing of personal data which produces legal effects concerning the data subject or similarly significantly affects the data subject. The GDPR ensures that such decisions may only be made under certain conditions in order to protect the rights and freedoms of the data subjects.
