November 29, 2021

Volume XI, Number 333

Advertisement
Advertisement

Can Individuals Request Access to The Logic Used by An Organization in Its Automatic Decision Making?

It depends.

While most modern data privacy statutes allow individuals to request access to the personal information held by an organization about the individual, they do not confer upon individuals a right to understand how or why a business has made decisions about them. That said, one privacy statute – the California Privacy Rights Act set to go into force in 2023 – has instructed the state data protection authority to issue regulations that will require business to provide in response to an access request “meaningful information about the logic involved” in automated decision making as well as “the likely outcome of the process with respect to the consumer.”1 The obligation to disclose information regarding the logic used for automatic decision-making may ultimately conflict with businesses exemption under the CPRA to disclose trade secrets.2

1 Cal. Civ. Code 1798.185(a)(16) (2021).

2 Cal. Civ. Code 1798.100(f); 1798.185(a)(3) (2021).

©2021 Greenberg Traurig, LLP. All rights reserved. National Law Review, Volume XI, Number 323
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

David A. Zetoony Privacy Attorney Greenberg Traurig
Shareholder

David Zetoony, Co-Chair of the firm's U.S. Data, Privacy and Cybersecurity Practice, focuses on helping businesses navigate data privacy and cyber security laws from a practical standpoint. David has helped hundreds of companies establish and maintain ongoing privacy and security programs, and he has defended corporate privacy and security practices in investigations initiated by the Federal Trade Commission, and other data privacy and security regulatory agencies around the world, as well as in class action litigation. 

David receives regular recognitions from clients and peers for...

303.685.7425
Advertisement
Advertisement
Advertisement