The data subject may request review of decisions taken solely on the basis of automated processing of personal data that affect their interests, including decisions defining their personal, professional, consumer or credit profile or aspects of their personality. On request the controller must provide clear and adequate information on the criteria and procedures used for the automated decision, respecting commercial and industrial secrets; where it withholds that information on grounds of secrecy, the ANPD may audit the processing for discriminatory aspects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.