Law note · France
GDPR Article 22, Right Against Automated Individual Decision-Making
cite Regulation (EU) 2016/679, Art. 22
stage In effect
since 2018-05-25
reviewed 2026-08-24
Individuals in France have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, unless a contract, explicit consent, or an EU or French law exception applies. The CNIL enforces this alongside the general General Data Protection Regulation (GDPR) Articles 12-23 rights of access, rectification, erasure, restriction, portability, and objection.
What it asks of an app
- Give a person in France a path to obtain human intervention, express their view, and contest a decision made solely by automated processing, including profiling, that produces a legal or similarly significant effect on them.
When LexLint raises it
Declared activities: high_risk_decisions, deploys_chatbot
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679