Sign in Subscribe

Automated Decision-Making Technology (ADMT)

Automated Decision-Making Technology (ADMT) refers to technologies that use automated processing, including AI, algorithms, and profiling, to make or substantially facilitate decisions about individuals. Explore guidance on ADMT under U.S. and EU privacy and AI laws, including the CCPA, GDPR, risk assessments, profiling, transparency, consumer rights, human review, explainability, and governance requirements for automated decision-making systems.

California’s Workplace ADS Rules: A New Layer Beyond CCPA ADMT Requirements

California’s Workplace ADS Rules: A New Layer Beyond CCPA ADMT Requirements

California’s workplace ADS law adds human corroboration, employee access and notice duties for automated discipline and termination. Explore prohibitions, exceptions and overlap with CCPA ADMT rules.

Requirements for Automated Decision-making Technology (ADMT) Under the CCPA

Requirements for Automated Decision-making Technology (ADMT) Under the CCPA

A practical guide to California's ADMT regulations, including when Article 11 applies and how businesses can comply with its disclosure, opt-out, access, and governance requirements.

What Is a Risk Assessment Under the CCPA?

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

California Defines AI: AB 2885 and Its Impact

California Defines AI: AB 2885 and Its Impact

California’s AB 2885 establishes a technology-neutral definition of artificial intelligence focused on AI systems, autonomy, inference, and outputs. This article explains the definition, how AI systems differ from AI models, where the definition applies, and what it means for AI governance.

The GDPR’s DPIA Requirement: Identifying, Assessing, and Mitigating High-Risk Processing

The GDPR’s DPIA Requirement: Identifying, Assessing, and Mitigating High-Risk Processing

A practical guide to GDPR Data Protection Impact Assessments (DPIAs), explaining when they are required, the nine high-risk criteria, how to assess and mitigate risks, conduct a DPIA, document decisions, and determine when prior consultation is required.

What is the "Right to an Explanation" under the GDPR?

What is the "Right to an Explanation" under the GDPR?

The GDPR gives individuals important rights when organizations rely on automated decision-making and profiling. Learn when Article 22 applies, the safeguards organizations must implement, and how individuals can challenge automated decisions.