The Court of Justice of the European Union rendered a preliminary judgment in favor of requiring controllers to provide a data subject with the “procedure and principles” used by an automated decision-making tool. An Austrian court previously ruled the automated credit check of a mobile provider customer conducted by Dun & Bradstreet violated the EU General Data Protection Regulation when it failed to provide the customer with the “logic involved” in making its determination.
Full story