How do I comply with GDPR Article 22 on automated decisions?

Article 22 gives people the right not to be subject to a solely automated decision with legal or similarly significant effect, and the right to human review, an explanation and to contest it. You need a person able to step in and a record of what was decided and why. sebbi.pro's CHALLENGE verdict routes a decision to a human, and every decision is sealed with its inputs and score so the explanation and the contest both have evidence behind them.

How it works

1. Score each automated decision; route the significant ones to a human with CHALLENGE.
2. Seal the decision, its inputs and its score so an explanation can be reconstructed.
3. When a person asks for review or contests it, you have a provable record, not a reconstruction.
4. The record is checkable against Bitcoin, so it cannot be quietly rewritten after a complaint.

This is a plain summary, not legal advice. GDPR also requires a lawful basis and information duties around automated decisions.