Article 24. Automated processing of personal data

The subject has the right not to be subject to a decision on the basis of exclusively automated processing of his personal data, affecting his rights and legitimate interests, giving rise to legal consequences, with the exception of cases provided for in the second part of this article.

A decision based on exclusively automated processing of the subjectʼs personal data can be made in the following cases:

the presence of the consent of the subject in writing, including in the form of an electronic document;

if the decision is made pursuant to an agreement between the owner and the subject or fulfillment of the conditions of a previously concluded agreement;

prescribed by law.

The owner and (or) operator is obliged to explain to the subject the decision-making procedure on the basis of exclusively automated processing of his personal data and the possible legal consequences of such a decision, provide an opportunity to object to this decision, and also explain the procedure for the subject to protect his rights and legitimate interests.

The owner and (or) operator is obliged to consider the objection specified in the third part of this article and notify the subject in writing of the results of the consideration of such an objection within ten days.