The Consequences Explained
Where the organisation makes solely automated decisions about the person, the response states the significance of those decisions and their likely consequences.
Intent
Knowing how a decision was reached is of little use without knowing what it did to the person - what they were refused, charged or ranked for.
How to test it
An assessor scores the criterion against a single response:
- Score 2
- The response states what the decisions mean for the person and what follows from them.
- Score 1
- The response describes the consequences in general terms that are not about this person.
- Score 0
- The response says nothing about the significance or consequences of the decisions.
- Not applicable
- The organisation makes no solely automated decisions about the person.
The law it reflects
This criterion reflects Article 15(1)(h) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.
See E10 in context in the full standard.