Rights in relation to automated decision taking

In order to ensure that individuals are aware of automated decisions data controllers must notify you where such decisions are made, although there is no sanction if they fail to do so.

The DPA includes specific examples of the purposes for which automated decision-taking might be used. For example, evaluating your performance at work, your creditworthiness, your reliability or your conduct.
You are entitled, by written notice, to require a data controller to ensure that no decision which significantly affects you is based solely on processing by automatic means of personal data relating to you.

If the Court is satisfied that the data controller has failed to comply with your notice, it may make an order requiring a person taking a decision in respect of you to reconsider the decision or to take a new decision which is not based solely on processing by automatic means.

You may also seek damages under section 13 if the data controller fails to respond to a proper objection and causes you to suffer damage.