A significant decision (one with an adverse legal effect or similarly significant adverse effect, section 50A) based wholly or partly on sensitive processing may not be taken solely by automated processing, meaning with no meaningful human involvement having regard to profiling, unless it rests entirely on data the data subject explicitly consented to or it is required or authorised by law. This replaced sections 49 and 50 for decisions from 5 February 2026.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.