No. 31: The Meaning of the GDPR Article 22
Abstract
This paper proposes an interpretation of several key provisions of the General Data Protection Regulation’s (GDPR) Article 22, “Automated Individual Decision-Making, Including Profiling.” It analyzes Article 22’s text in the context of its legislative history, related EU laws, and stated purposes, to determine the rights that Article 22 creates for EU citizens as well as the obligations imposed on companies operating in the EU. The purpose of this paper is to highlight ambiguous areas of the law and suggest the interpretation that will most likely be upheld by the European Court of Justice (ECJ).