As replaced by Law 5002/2022, a decision based solely on automated processing, including profiling, that produces adverse legal effects or significantly affects the data subject is prohibited unless a law expressly allows it and provides at least specific information, human intervention by the controller, and the right to express a view, obtain an explanation and contest or seek review; such decisions may not rest on special categories unless the law expressly provides with Article 46(2) safeguards; profiling that discriminates on the basis of special categories is prohibited.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.