Laws · GDPR ·art-22-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
How it connects
Cited by
- Worten v ACT: processing working time records lawful if necessary for legal compliance
- Website providing legal information: Insufficient fulfilment of information obligations
- One-Stop-Shop case digest on right of access
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Guidelines 3/2025 on the interplay between the DSA and the GDPR
All 41
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision
- Österreichische Datenschutzbehörde v CRIF
- Court of Justice of the European Union - Case C-422/24 - AB Storstockholms Lokaltrafik.
- EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- Munich Court: §11(8) RBStV validly restricts Art. 15 GDPR access for broadcasting
- Tribunal of Bologna orders Comet s.p.a. to fulfil data subject's Art. 15 GDPR access
- Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR
- Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria
- EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- WhatsApp Ireland Ltd v European Data Protection Board
- Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik
- Philippe Latombe v European Commission
- CK v Magistrat der Stadt Wien
- OQ v Land Hessen
- Proceedings brought by J.M
- RW v Österreichische Post AG
- Judgment of the Court (Third Chamber), 30 May 2013.#Worten — Equipamentos para o Lar SA v Autoridade para as Condições de Trabalho (ACT).#Request for a preliminary ruling from the Tribunal do Trabalho de Viseu.#Processing of personal data — Directive 95/46/EC — Article 2 — Concept of ‘personal data’ — Articles 6 and 7 — Principles relating to data quality and criteria for making data processing legitimate — Article 17 — Security of processing — Working time — Record of working time — Access by t
- General Data Protection Regulation (GDPR) – Revolution Coming to European Data Protection Laws in 2018. What’s New for Ordinary Citizens?
- The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how
- HOW GDPR TREATS AUTOMATED DECISION-MAKING
- CJEU: The Rating of a Natural Person’s Creditworthiness by a Credit Rating Agency Constitutes Profiling and Can Be an Automated Decision under Article 22 GDPR
- BVwG - W254 2253353-1
- NAIH (Hungary) - NAIH-11443-3/2026
- National court annuls DPA sanction against KFC Spain over website privacy information
- NAIH (Hungary) - NAIH-450-7-2026
- AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber
- NAIH (Hungary) - NAIH-4462-5-2026
- Datatilsynet reprimands Danish Tax Administration for access request delays (2019-2024)
- High Court examines DPA inquiry into Meta's refusal of raw data access and portability
- Italian DPA sanctions Experian Italia for incomplete Art. 15 GDPR access responses on
- Italian DPA finds Cerved Group failed to disclose creditworthiness scores in Art. 15
- AEPD: CaixaBank requested excessive inheritance documentation from heirs
- Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access
Related across sources
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
C-634/21 OQ v Land Hessen In Case C-634/21, the CJEU addressed a preliminary ruling from the Verwaltungsgericht Wiesbaden concerning OQ's challenge against Land Hessen's refusal to order SCHUFA Holding AG… CJEU ·First Chamber Dec 7, 2023 Profiling Automated Decision-Making Marketing
W256 2227693-1 Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR On 05.09.2019, the Austrian DPA (DSB) notified the controller of a customer loyalty program that they were initiating an ex officio investigation. The controller responded by… Federal Administrative Court Sep 28, 2023 Marketing Profiling Automated Decision-Making
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). ·CJEU Jan 9, 2025 IP Address Retention Period Identification
W254 2253353-1 On 7 April 2021, the data subject requested access to their data under Article 15 GDPR The controller replied on 12 April 2021 and provided further information on 27 May 2021 after the data subject made a further enquiry. As the controller's privacy policy listed… BVwG - W254 2253353-1 ·Federal Administrative Court Nov 17, 2025 Profiling Automated Decision-Making Marketing
C-422/24 Case C-422/24 - AB Storstockholms Lokaltrafik. A new page has been created with the following information: "" CJEU Jan 7, 2026 Personal Data Fairness & Transparency Controllers