Law note · Ireland
GDPR Article 22, Automated Decision-Making in Ireland
General Data Protection Regulation (GDPR) Articles 12 to 23 apply, including Article 22 rights against a decision based solely on automated processing that produces legal or similarly significant effects, which the DPA 2018 gives domestic effect to with the DPC as enforcement authority. Where an automated decision is permitted, on contract necessity, legal authorization, or explicit consent, the controller must implement human-intervention, point-of-view, and contest safeguards.
Sections 41 to 43 of the DPA 2018 narrow specific data-subject rights, including the Article 22 adjacent rights of access, rectification, restriction and objection, for archiving in the public interest, scientific or historical research, or statistical purposes where exercising the right would render the purpose impossible or seriously impair it.
What it asks of an app
- Honor a person's request to access, rectify, erase, restrict, port, or object to processing of their personal data within one month of receipt, as required by General Data Protection Regulation (GDPR) Articles 12 to 23, subject to the narrower research and archiving exceptions in Data Protection Act 2018 Sections 41 to 43.
- Provide a meaningful human review before finalizing any decision based solely on automated processing that produces legal or similarly significant effects for a person in Ireland, under GDPR Article 22.
When LexLint raises it
Declared activities: crawls_web, trains_models, generates_content, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679
Data Protection Act 2018 ยงยง41-43