Flag of Brazil



Article 20

Right to Review Decisions Based on Automated Processing of Personal Data

The data subject has the right to request a review of decisions taken solely on the basis of automated processing of personal data affecting his/her interests, including decisions aimed at defining his/her personal, professional, consumer and credit profile or personality aspects.

  • 1. The controller shall provide, whenever requested, clear and adequate information regarding the criteria and procedures used for the automated decision, in compliance with commercial and industrial secrets.
  • 2. In case of non disclosure of the information referred to in § 1 of this article based on the observance of commercial and industrial secrecy, the national authority may perform audits to verify discriminatory aspects in automated processing of personal data.
  • 3. (Vetoed).