The data subject has the right to request a review, by a natural person, of decisions taken solely on the bases of automated processing of personal data that affects her/his interests, including decisions intended to define her/his personal, professional, consumer or credit profile or aspects of her/his personality.
- Whenever requested to do so, the controller shall provide clear and adequate information regarding the criteria and procedures used for an automated decision, subject to commercial and industrial secrecy.
- If there is no offer of information as provided in 1 of this article, based on commercial and industrial secrecy, the national authority may carry out an audit to verify discriminatory aspects in the automated processing of personal data.
