Flag of Brazil



Article 20

The data subject has the right to request the review of decisions made solely on the basis of automated processing of personal data affecting his interests, including decisions to define his personal, professional, consumer and credit profile, or the aspects of your personality.

  • 1. The controller shall provide, whenever requested, clear and adequate information regarding the criteria and procedures used for the automated decision, in compliance with commercial and industrial secrets.
  • 2. In case of non-provision of information referred to in paragraph 1 of this article based on the observance of commercial and industrial secrecy, the national authority may perform audits to verify discriminatory aspects in automated processing of personal data.
  • 3 (Vetoed).