Article 24 – Automated individual decision-making, including profiling
Changes since19 November 2025COM(2025) 837, Art 24
Changes Article 24(1). Every text of this provision
Text as printed
Changes to the law in force · Changes since the Commission proposal
Article 24(1) In every text (Article 24(1))
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless such processing:
is necessary for entering into, or performance of, a contract between the data subject and a data controller ;
is authorised by Union law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or (c) is based on the data subject's explicit consent.
Article 24(2) In every text (Article 24(2))
The draft's instruction replaces paragraphs 1 and 2, but its text contains paragraph 1 only, so no wording is shown for paragraph 2. Open the official source to read the instruction in context.
The amending passage as printed
6. in Article 24 paragraphs 1 and 2 are replaced by the following: ‘1. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless such processing: (a) is necessary for entering into, or performance of, a contract between the data subject and a data controller ; (b) is authorised by Union law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or (c) is based on the data subject's explicit consent.’