Replaces Article 22: significant decisions based solely on automated processing (no meaningful human involvement) are permitted with safeguards (information about the decision, the chance to make representations, human intervention and to contest), but not where they rest on special category data unless explicit consent or contract or legal authorisation with a substantial public interest condition applies, and never where the processing relies on a recognised legitimate interest. Parallel rules for law enforcement in 2018 Act sections 50A to 50D.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.