๐๐ซ๐๐๐ ๐๐๐๐ซ๐๐ญ๐ฌ & ๐๐ซ๐๐ง๐ฌ๐ฉ๐๐ซ๐๐ง๐๐ฒ ๐ซ๐ ๐๐ฎ๐ญ๐จ๐ฆ๐๐ญ๐๐ ๐๐๐๐ข๐ฌ๐ข๐จ๐ง๐ฌ ๐ฎ๐ง๐๐๐ซ ๐ญ๐ก๐ ๐๐๐๐
When automated decision-making (including profiling) impact individuals, they have the right to ๐ฆ๐๐๐ง๐ข๐ง๐ ๐๐ฎ๐ฅ ๐ข๐ง๐๐จ๐ซ๐ฆ๐๐ญ๐ข๐จ๐ง about the logic involved (Art. 22 GDPR). This means ๐๐จ๐ฆ๐ฉ๐๐ง๐ข๐๐ฌ ๐ฆ๐ฎ๐ฌ๐ญ ๐๐ฑ๐ฉ๐ฅ๐๐ข๐ง ๐ก๐จ๐ฐ ๐ฉ๐๐ซ๐ฌ๐จ๐ง๐๐ฅ ๐๐๐ญ๐ ๐ฐ๐๐ฌ ๐ฉ๐ซ๐จ๐๐๐ฌ๐ฌ๐๐ ๐ข๐ง ๐ ๐๐ฅ๐๐๐ซ, ๐ญ๐ซ๐๐ง๐ฌ๐ฉ๐๐ซ๐๐ง๐ญ, ๐๐ง๐ ๐๐๐๐๐ฌ๐ฌ๐ข๐๐ฅ๐ ๐ฐ๐๐ฒ. Simply sharing a complex algorithm or technical details is not enough!
๐๐ก๐๐ญ ๐๐๐จ๐ฎ๐ญ ๐ญ๐ซ๐๐๐ ๐ฌ๐๐๐ซ๐๐ญ๐ฌ? They donโt automatically override transparency rights. A national law that generally restricts access to trade secrets wouldnโt comply with EU law.
๐๐ก๐ ๐๐๐โ๐ฌ ๐ฌ๐จ๐ฅ๐ฎ๐ญ๐ข๐จ๐ง? If a company believes disclosure affects third-party data or trade secrets, the company may disclose the information only to the court/authority, who then decides whether a trade secret is at hand or not (ECJ 27.2.2025, C-203/22). Hence, authorities or courts must ๐๐ฌ๐ฌ๐๐ฌ๐ฌ ๐ญ๐ก๐ ๐๐๐ฅ๐๐ง๐๐ ๐จ๐ ๐ข๐ง๐ญ๐๐ซ๐๐ฌ๐ญ๐ฌ ๐๐๐ฌ๐ ๐๐ฒ ๐๐๐ฌ๐.