Rights in Relation to Automated Decision Making and Profiling
Under the General Data Protection Regulation (GDPR), you have a number of rights regarding the way in which we are allowed to process your personal data.
What is automated individual decision-making and profiling?
Automated individual decision-making is a decision made by automated means without any human involvement.
Examples of this include:
- an online decision to award a loan; and
- a recruitment aptitude test which uses pre-programmed algorithms and criteria.
Automated individual decision-making does not have to involve profiling, although it often will do.
When can the Council carry out this type of processing?
Solely automated individual decision-making - including profiling - with legal or similarly significant effects is restricted, although this restriction can be lifted in certain circumstances.
We can only carry out solely automated decision-making with legal or similarly significant effects if the decision is:
- necessary for entering into or performance of a contract between an organisation and the individual;
- authorised by law (for example, for the purposes of fraud or tax evasion); or
- based on the individual's explicit consent.
Submitting a request
An Information Rights Request under GDPR may be submitted in either of the following ways:
- By submitting the online form under Apply for This Service below.
- By writing to Information Governance, Mendip District Council, Council Offices, Cannards Grave Road, Shepton Mallet, BA4 5BT
You must include your full name, a return address and a details of the information that you are requesting. Mendip District Council has a duty to verify the identity of requesters, and consequently you may be asked to provide proof of your identity.