DPIA for Automated Decision-Making Systems

Purpose

Conduct a DPIA specifically tailored to automated decision-making (ADM) and profiling systems that produce legal or similarly significant effects on individuals, as required by GDPR Article 35(3)(a).

Prerequisites

• System documentation for the ADM/profiling system (algorithm design, training data, decision logic)
• Art. 35(3)(a) threshold confirmed: systematic and extensive evaluation of personal aspects based on automated processing, including profiling, on which decisions are based that produce legal effects or similarly significantly affect natural persons
• Data categories processed identified, including any Art. 9 special categories
• Existing Art. 22 safeguards documentation if available

Workflow

Step 1: System Description and Scope

Document the ADM system under assessment: