> ## Content Index
> Fetch the complete content index at: https://www.thedelatorrereview.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# What is the "Right to an Explanation" under the GDPR?
- URL: https://www.thedelatorrereview.com/what-is-the-right-to-an-explanation-under-the-gdpr/
- Published: 2019-02-22T15:48:00.000Z
- Updated: 2026-07-18T20:25:08.000Z
- Description: The GDPR gives individuals important rights when organizations rely on automated decision-making and profiling. Learn when Article 22 applies, the safeguards organizations must implement, and how individuals can challenge automated decisions.
- Author: Lydia
- Tags: Profiling, Automated Decision-Making Technology (ADMT), Right to an Explanation, GDPR, EU, Privacy Rights, Data Protection Law, Special Category Data, Consent, Transparency, Discrimination, Data Protection Impact Assessment (DPIA) / Privacy Impact Assessment (PIA), AI Governance, Human Oversight, Algorithmic Accountability, Artificial Intelligence (AI)

> **Key points:** (1) The GDPR regulates profiling and solely automated decision-making, but they are not the same thing. (2) Profiling means using automated processing of personal data to evaluate or predict aspects of an individual, such as their behavior, preferences, performance, reliability, or interests. Profiling may or may not result in a decision. (3) Solely automated decision-making refers to decisions made without any meaningful human involvement. (4) Article 22 GDPR only applies where a decision is both: made solely by automated means; and produces legal effects or similarly significant effects on the individual. (5) Such decisions are generally prohibited unless one of the limited exceptions under Article 22 applies. (6) When an exception permits solely automated decision-making, organizations must provide additional safeguards, including information about the processing, a way to obtain human intervention, the opportunity to express a point of view and challenge the decision, and measures to ensure the automated system functions fairly and accurately. (7) The GDPR imposes even stricter rules where the decision involves special category personal data, and additional protections apply when processing concerns children.

---

Artificial intelligence, algorithms, and automated decision-making are increasingly used to make decisions that affect individuals, from approving loans and screening job applicants to detecting fraud and determining insurance premiums. This has led many people to ask whether the GDPR provides a "right to an explanation" of how these automated decisions are made.

Although the GDPR does not explicitly create a standalone "right to an explanation," it does give individuals important rights when organizations rely on certain forms of automated decision-making. These rights are primarily found in[ Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) GDPR (Automated individual decision-making, including profiling), together with the transparency obligations in [Articles 13](https://gdpr-info.eu/art-13-gdpr/?ref=thedelatorrereview.com) (Information to be provided where personal data are collected from the data subject), [Article 14](https://gdpr-info.eu/art-14-gdpr/?ref=thedelatorrereview.com) (Information to be provided where personal data have not been obtained from the data subject), and [Article 15 ](https://gdpr-info.eu/art-15-gdpr/?ref=thedelatorrereview.com)(right to access) and further explained in guidance from the European Data Protection Board (EDPB). **This article focuses mainly on Article 22\. For a discussion of the transparency obligations under Articles 13 and 14, see "**[**What Is the 'Right to Be Informed' under the GDPR?**](https://www.thedelatorrereview.com/ghost/#/editor/post/6a569f03a6be0d0001944be8)**" For more information about the right of access under Article 15, see "**[**What Is the 'Right of Access' under the GDPR?**](https://www.thedelatorrereview.com/ghost/#/editor/post/6a56eed6a6be0d0001944c68)**"**

Before examining those rights, it is important to understand the difference between **profiling** and **solely automated decision-making**, as the GDPR regulates these concepts differently.

## What is automated decision-making and profiling?

The GDPR distinguishes between **automated decision-making** and **profiling**. Although the two concepts are closely related and often occur together, they are not the same.

### Automated decision-making

Automated decision-making occurs when **a decision is made entirely by automated means, without any meaningful human involvement**.

Examples include:

- An online system that automatically approves or rejects a loan application.
- A recruitment system that automatically accepts or rejects job applicants based on pre-programmed criteria or algorithms.

Automated decision-making does not have to involve profiling, although in practice it frequently does.

### Profiling

[Article 4(4)](https://gdpr-info.eu/art-4-gdpr/?ref=thedelatorrereview.com) of the GDPR defines **profiling** as:

> *"*any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;*"* 

In simple terms, **profiling involves using automated technologies to analyze personal data in order to evaluate or predict characteristics, preferences, or behaviors about an individua**l.

Organizations may collect personal data from a wide variety of sources, including:

- websites and online searches;
- purchasing history;
- mobile apps and connected devices;
- social media platforms;
- video surveillance systems; and
- Internet of Things (IoT) devices.

Organizations then use algorithms, artificial intelligence, and machine learning to analyze this information, identify patterns, and group individuals with similar characteristics. These profiles may be used to:

- identify an individual's interests or preferences;
- predict future behavior or choices; or
- support or make decisions about that individual.

Profiling has many legitimate and beneficial uses. For example, it may be used to detect fraud, personalize online services, recommend products, improve healthcare outcomes, assess financial risk, or tailor educational services. However, because profiling can also significantly affect individuals' rights and freedoms, [Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) of the GDPR imposes additional safeguards when it is used as part of solely automated decision-makingthat produces legal or similarly significant effects.

## When is Automated Decision Making (ADMT) Subject to Article 22?

![](https://storage.ghost.io/c/54/ef/54efeb65-4f2f-479e-b4bb-a9ee526feeaa/content/images/2026/07/ChatGPT-Image-Jul-18--2026-at-01_11_57-PM.png)

Automated individual decision-making and profiling can lead to faster, more consistent, and more efficient decisions when used responsibly. However, if used improperly, they can also result in unfair, inaccurate, or discriminatory outcomes that may significantly affect an individual's rights and opportunities.

To address these risks, [Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) GDPR gives individuals the right not to be subject to certain decisions made solely by automated means, including decisions based on profiling, where those decisions produce legal effects or similarly significant effects on the individual. Article 22 GDPR does not prohibit all automated decision-making. Instead, it **restricts decisions that meet all of the following conditions:**

- the decision is made **solely by automated means**, with no meaningful human involvement;
- the decision produces **legal effects** or **similarly significant effects** on the individual; and
- **no exception under** [**Article 22**](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) **applies**.

Each of these requirements is discussed below.

### What does "solely automated" mean?

A decision is solely automated when it is made entirely by technology, **without any meaningful human involvement** in reviewing or making the final decision.

Simply having a person involved somewhere in the process is not enough. The human reviewer must genuinely assess the relevant information, have the authority to change the outcome, and not merely rubber-stamp the automated result.

### What are "legal effects" and "similarly significant effects"?

The GDPR does not define these terms, but they generally refer to decisions that have a substantial impact on an individual's rights, opportunities, or circumstances.

- A **legal effect** is one that affects an individual's legal rights or obligations. Examples include decisions that determine eligibility for benefits or the approval of a contract.
- A **similarly significant effect** is one that has a comparable impact on an individual's life, even if it does not directly change their legal rights. Examples include: (1) automatically rejecting an online loan or credit application; (2) automatically screening out a job applicant during recruitment; (3) refusing insurance coverage or significantly affecting insurance premiums based solely on an automated assessment; or (4) making decisions that substantially affect an individual's access to education, healthcare, housing, or employment.

By contrast, decisions with only a minor or temporary impact—such as recommending products on an online shopping site or displaying personalized advertisements—will generally not meet this threshold.

## **When are solely automated decisions permitted under Article 22?**

Although the GDPR generally prohibits solely automated decisions that have legal or similarly significant effects, Article 22 permits this type of processing in three limited circumstances.

**1\. The decision is necessary for entering into or performing a contract**: An organization may rely on solely automated decision-making where it is **necessary** to enter into or perform a contract with the individual.

This exception is interpreted narrowly. The automated decision must be genuinely necessary to provide the requested product or service, not merely more convenient, faster, or less expensive for the organization.

> **Example:** A bank uses an automated system to determine whether an online loan application satisfies objective lending criteria where immediate approval is necessary to provide the requested service.

**2\. The decision is authorized by European Union or Member State law**: Solely automated decision-making is also permitted where it is expressly authorized by European Union or Member State law that applies to the controller.

The law must also include appropriate safeguards to protect the individual's rights, freedoms, and legitimate interests.

> **Example:** National legislation authorizing automated processing to detect tax fraud or prevent certain types of financial crime.

#### 3\. The individual has given explicit consent

An organization may rely on solely automated decision-making where the individual has provided **explicit consent**.

Explicit consent requires a clear, specific, and affirmative statement of agreement. It cannot be implied from silence, inactivity, or pre-ticked boxes, and the individual must be free to withdraw consent at any time.

## Do safeguards apply?

Yes. Even when an organization relies on one of these exceptions, Article 22 requires it to implement appropriate safeguards to protect the individual.

At a minimum, individuals must be able to:

- request **human intervention**;
- **express their point of view**; and
- **challenge or contest the decision**.

Organizations must also comply with the GDPR's **transparency obligations** by informing individuals about the automated decision-making and providing meaningful information about the logic involved, as well as the significance and envisaged consequences of the processing. They must also take appropriate steps to ensure that automated systems function **accurately, fairly, and without unlawful discrimination**. Among other things, organizations must:

- **Provide meaningful information** about the automated decision-making process, including the logic involved, the significance of the processing, and its likely consequences for the individual.
- **Use appropriate mathematical and statistical methods** to help ensure that automated systems produce reliable and accurate results.
- **Take reasonable steps to prevent inaccuracies, bias, and discrimination**, including implementing technical and organizational measures to detect and correct errors and reduce the risk of unfair outcomes.
- **Protect the personal data used in the automated decision-making process** through appropriate security measures that are proportionate to the risks involved.

These safeguards help ensure that automated decision-making remains subject to human oversight and accountability, reducing the risk that important decisions are based on inaccurate, biased, or unfair automated processing.

**Additional protections for special category personal data and children**: The GDPR imposes even stricter requirements when solely automated decisions are based on special category personal data, such as information revealing racial or ethnic origin, political opinions, religious beliefs, health, biometric data, or sexual orientation (see also, [What are Special Categories of Data under the GDPR?](https://www.thedelatorrereview.com/what-are-special-categories-of-data-under-the-gdpr/)).

Under [Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com)(4) of GDPR solely automated decisions based on special category personal data are generally prohibited unless both of the following conditions are met:

- the individual has given **explicit consent**, **or** the processing is **necessary for reasons of substantial public interest** and is authorized by European Union or Member State law; **and**
- appropriate safeguards are in place to protect the individual's rights and freedoms.

Additional care is also expected when automated decision-making involves **children**, given their particular vulnerability. 

**Challenging Decisions based on ADMT:** Under [Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com), organizations must **provide a way for individuals to challenge the decision**, including the right to:

  - obtain human intervention;
  - express their point of view; and
  - contest the decision and request that it be reviewed by a person rather than solely by an automated system.

**Is a Data Protection Impact Assessment (DPIA) required?** Because solely automated decision-making with legal or similarly significant effects presents a high risk to individuals' rights and freedoms, organizations will often be required to conduct a Data Protection Impact Assessment (DPIA) before carrying out the processing.

A DPIA helps organizations identify the risks posed by the automated decision-making, assess whether the processing is necessary and proportionate, and implement measures to reduce or eliminate those risks. It is an important accountability tool that demonstrates compliance with the GDPR.

## What if Article 22 Does Not Apply?

![](https://storage.ghost.io/c/54/ef/54efeb65-4f2f-479e-b4bb-a9ee526feeaa/content/images/2026/07/ChatGPT-Image-Jul-18--2026-at-01_08_54-PM.png)

As explained above, Article 22 applies only to a narrow category of automated processing. However, this **does not mean that other forms of automated processing are unregulated.** Organizations must still comply with the GDPR's general requirements, including:

- complying with the **data protection principles** set out in Article 5 GDPR;
- identifying and documenting a **lawful basis** for the processing under Article 6 GDPR;
- providing individuals with the required **privacy information**;
- implementing appropriate **technical and organizational measures** to ensure the security of personal data and demonstrate accountability; and
- ensuring that individuals can exercise their **GDPR rights**, including the rights of access, rectification, erasure, restriction of processing, and, where applicable, the right to object.

In particular, individuals have the **right to object to profiling** in certain circumstances. Where that right applies, organizations must specifically inform individuals of this right and make it easy for them to exercise it. (see also, [What is the "Right to Object" under the GDPR?](https://www.thedelatorrereview.com/ghost/#/editor/post/6a5b8073cca3d100011d2e20).)

Accordingly, even where [Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) does not apply, organizations using profiling or other forms of automated processing must ensure that their processing complies with the GDPR and respects individuals' rights.

## Additional Resources

[Article 22](https://gdpr-info.eu/art-22-gdpr/?ref=thedelatorrereview.com) of the GDPR

Suitable Recitals [(71) Profiling](https://gdpr-info.eu/recitals/no-71/?ref=thedelatorrereview.com) [(72) Guidance of the European Data Protection Board Regarding Profiling](https://gdpr-info.eu/recitals/no-72/?ref=thedelatorrereview.com) [(91) Necessity of a Data Protection Impact Assessment](https://gdpr-info.eu/recitals/no-91/?ref=thedelatorrereview.com)

#### Articles

- [Studying the behavior of AI](https://link.medium.com/J9A0Gl6bkW?ref=thedelatorrereview.com) / A new paper frames the emerging interdisciplinary field of machine behavior (Article by MIT Labs for Medium)
- [How Artificial Intelligence Works](http://www.europarl.europa.eu/RegData/etudes/BRIE/2019/634420/EPRS%5FBRI%282019%29634420%5FEN.pdf?ref=thedelatorrereview.com) (Briefing for EU Parliament)
- What is AI:[ What Exactly is Artificial Intelligence and Why is it Driving me Crazy](https://www.datasciencecentral.com/profiles/blogs/what-exactly-is-artificial-intelligence-and-why-is-it-driving-me-?ref=thedelatorrereview.com) by William Vorhies
- [Can AI Be a Fair Judge in Court? Estonia Thinks So](https://outline.com/FH2WjX?ref=thedelatorrereview.com) — Eric Niiler for Wired
- [AI Ethics: Seven Traps](https://freedom-to-tinker.com/2019/03/25/ai-ethics-seven-traps/?ref=thedelatorrereview.com) by [Annette Zimmermann](https://freedom-to-tinker.com/author/annettez/?ref=thedelatorrereview.com) [Leave a Comment](https://freedom-to-tinker.com/2019/03/25/ai-ethics-seven-traps/?ref=thedelatorrereview.com#respond) for Freedom to Tinker.

#### Books

[Ethically Aligned Design, First Edition](https://ethicsinaction.ieee.org/?ref=thedelatorrereview.com#read) (downloadable Book) by the Institute of Electrical and Electronics Engineers ([IEEE](https://www.ieee.org/?ref=thedelatorrereview.com)).

#### Papers

[Counterfactual explanations without opening the black box: automated decisions and the GDPR](https://ora.ox.ac.uk/objects/uuid:86dfcdac-10b5-4314-bbd1-08e6e78b9094?ref=thedelatorrereview.com) by Sandra Wachter, Brent Mittelstadt, and Chris Russel (2018) ( There has been much discussion of the “right to explanation” in the EU General Data Protection Regulation, and its existence, merits, and disadvantages. Implementing a right to explanation that opens the ‘black box’ of algorithmic decision-making faces major legal and technical barriers. Explaining the functionality of complex algorithmic decisionmaking systems and their rationale in specific cases is a technically challenging problem. Some explanations may offer little meaningful information…)

[The Ethical Machine](https://ai.shorensteincenter.org/ideas/2019/4/3/the-automated-administrative-state?ss%5Fsource=sscampaigns&ss%5Fcampaign%5Fid=5cab62316998c60001102f00&ss%5Femail%5Fid=5cab6448c7a57b0001f7990c&ss%5Fcampaign%5Fname=The+Automated+Administrative+State&ss%5Fcampaign%5Fsent%5Fdate=2019-04-08T15%3A10%3A27Z&ref=thedelatorrereview.com): The Ethical Machine is an anthology of essays on the ethics of artificial intelligence, bias, and what they mean for the future of technology and society.

[From dignity to security protocols: a scientometric analysis of digital ethics](http://From%20dignity%20to%20security%20protocols:%20a%20scientometric%20analysis%20of%20digital%20ethics) by René Mahieu, Nees Jan van Eck, David van Putten, and Jeroen van den Hoven

[Accountable Algorithms ](https://www.pennlawreview.com/print/165-U-Pa-L-Rev-633.pdf?ref=thedelatorrereview.com)JOSHUA A. KROLL, JOANNA HUEY, SOLON B AROCAS, EDWARD W. FELTEN, JOEL R. REIDENBERG, DAVID G. ROBINSON & HARLAN YU \[V165:633 Pennsylvania law review\] V.2

[Access to Algorithms SSRN](https://papers.ssrn.com/sol3/papers.cfm?abstract%5Fid=3355776&ref=thedelatorrereview.com) [Hannah Bloch-Wehba](https://papers.ssrn.com/sol3/cf%5Fdev/AbsByAuth.cfm?per%5Fid=1444444&ref=thedelatorrereview.com) / Drexel University Thomas R. Kline School of Law; Yale University — Yale Information Society Project

#### Guidelines from regulators

**European Data Protection Board (EDPB):**

- The EDPB endorsed WP29’s adopted guidelines on Automated individual decision-making and Profiling: [Guidelines on automated individual decision-making and profiling for the purposes of Regulation 2016/679 (WP251)](http://ec.europa.eu/newsroom/article29/document.cfm?doc%5Fid=49826&ref=thedelatorrereview.com)

European Data Protection Supervisor (EDPS)

- EDPS [Opinion on coherent enforcement of fundamental rights in the age of big data ](https://edps.europa.eu/sites/edp/files/publication/16-09-23%5Fbigdata%5Fopinion%5Fen.pdf?ref=thedelatorrereview.com)(2006)
- [The Cartoon introduction to data ethics ](https://edps.europa.eu/sites/edp/files/publication/comic%5Fbook%5Fon%5Fdigital%5Fethics%5Ffor%5Fweb%5Fen.pdf?ref=thedelatorrereview.com)(20818)

**UK**

- Royal Society (2018): [Governing artificial intelligence: ethical, legal, and technical opportunities and challenges](http://rsta.royalsocietypublishing.org/content/376/2133?ref=thedelatorrereview.com)
- Professor Dame Wendy Hall and Jérôme Pesenti report on [Growing the Artificial Intelligence Industry in the UK](https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment%5Fdata/file/652097/Growing%5Fthe%5Fartificial%5Fintelligence%5Findustry%5Fin%5Fthe%5FUK.pdf?ref=thedelatorrereview.com)
- [Big data, artificial intelligence, machine learning and data protection](https://ico.org.uk/media/for-organisations/documents/2013559/big-data-ai-ml-and-data-protection.pdf?ref=thedelatorrereview.com) / UK / Information Commissioner Office (ICO)
- [European Union Agency for Fundamental Rights](https://www.linkedin.com/company/eu-fundamental-rights-agency/?ref=thedelatorrereview.com)’ report on [“Getting the Future Right: #ArtificialIntelligence and Fundamental Rights”](https://lnkd.in/gmst%5FeM?ref=thedelatorrereview.com), which marks a policy shift from ethics-based AI governance to fundamental-rights-based AI governance. 2020

**CoE**

- Council of Europe (CoE): [Report on AI](https://rm.coe.int/report-on-artificial-intelligence-artificial-intelligence-and-data-pro/16808e6012?ref=thedelatorrereview.com) 2018
- The CAHAI Secretariat published the report [“Towards Regulation of AI Systems: Global perspectives on the development of a legal framework on Artificial Intelligence systems based on the Council of Europe’s standards on human rights, democracy and the rule of law”](https://lnkd.in/gHwjsjY?ref=thedelatorrereview.com) 2020

**Reports (US)**

- [Preparing for the future of artificial intelligence](https://obamawhitehouse.archives.gov/sites/default/files/whitehouse%5Ffiles/microsites/ostp/NSTC/preparing%5Ffor%5Fthe%5Ffuture%5Fof%5Fai.pdf?ref=thedelatorrereview.com) (White House Report — 2006)
- [Report Summary: FTC on Big Data](https://medium.com/golden-data/report-review-ftc-on-big-data-f3cbe57c885b?ref=thedelatorrereview.com) (2006) (summary of Big Data: A Tool for Inclusion or Exclusion? Understanding the Issues (FTC Report, 2016)
- [Vermont Artificial Intelligence Task Force](https://accd.vermont.gov/sites/accdnew/files/documents/TaskForce/Artificial%20Intelligence%20Task%20Force%20Final%20Report%201.15.2020.pdf?ref=thedelatorrereview.com) — FINAL REPORT — January 2020
- The Michael Dukakis Institute for Leadership and Innovation [Center for AI and Digital Policies](https://caidp.dukakis.org/resources/publications/?ref=thedelatorrereview.com) published a comprehensive report (including country specific reports) ["ARTIFICIAL INTELLIGENCE and DEMOCRATIC VALUES: The AI Social Contract Index 2020](https://caidp.dukakis.org/app/download/8274101363/AISCI-2020.pdf?t=1607964353&ref=thedelatorrereview.com)"[(AISCI-2020)"](https://caidp.dukakis.org/app/download/8274101363/AISCI-2020.pdf?t=1607964353&ref=thedelatorrereview.com) led by [Marc Rotenberg](https://www.linkedin.com/in/ACoAAAAF7wQBDQxLZMLZnFgxkTT3GqfdV0gz7RM?ref=thedelatorrereview.com)
- [The Future of Privacy Forum](https://www.linkedin.com/company/the-future-of-privacy-forum/?ref=thedelatorrereview.com) published [The Spectrum of Artificial Intelligence — An Infographic Tool](https://lnkd.in/gmvx9j5?ref=thedelatorrereview.com)

### Other

This video is quite technical but useful in breaking down the issues of [fairness and bias in algorithmic decision-making](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D25%5F15362262-2Dwww.youtube.com%5Fwatch-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=u9UGyzxRDKd1IPqFSoDu7oIuAmjszveJGpoS%5F3apdD8&s=cBb6Tu%5FzRKwp8ijN2fjB8haMVlTWAuFCawuiiQouc9I&e=&ref=thedelatorrereview.com).

- IEEE, the international technical standards body, is working on [benchmarks/standards for legal AI apps](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D25%5F15362266-2Dwww.artificiallawyer.com%5F2019%5F10%5F03%5Fieee-2Dto-2Dcreate-2Dstandards-2Dto-2Dend-2Dwild-2Dwest-2Dlegal-2Dai-2Dmarket-2Dculture%5F-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=u9UGyzxRDKd1IPqFSoDu7oIuAmjszveJGpoS%5F3apdD8&s=oqHtKBQH67c42rS45R8--DgmepgRDRVMjHU9Bf0NYwo&e=&ref=thedelatorrereview.com) and machine learning tools.
- [The Toronto Declaration](http://A%20declaration%20by%20AI%20proffessionals%20of%20their%20intent%20to%20protect%20the%20right%20to%20equality%20and%20non-discrimination%20in%20machine%20learning%20systems): A 2018 declaration by AI professionals of their intent to protect the right to equality and non-discrimination in machine learning systems
- [Ethical Accountability Framework](http://informationaccountability.org/wp-content/uploads/Hong-Kong-Report-FINAL-for-electronic-distribution-10.22.18.pdf?ref=thedelatorrereview.com) for Hong Kong China by the Information Accountability Foundation and the Data Protection Commissioner of Hong Kong.
- 40th International Conference of Data Protection and Privacy Commissioners (ICDPPC -2018): [Declaration on Ethics and Data Protection in Artificial Intelligence](https://icdppc.org/wp-content/uploads/2018/10/20180922%5FICDPPC-40th%5FAI-Declaration%5FADOPTED.pdf?ref=thedelatorrereview.com)

From the *New York Times*: “[The Secretive Company That May End Privacy As We Know It](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D34%5F16132574-2Dwww.nytimes.com%5F2020%5F01%5F18%5Ftechnology%5Fclearview-2Dprivacy-2Dfacial-2Drecognition.html-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=iC04AxprvjnjTpwgwrQL6S0K7PgnF6s8aTFuDQTXMUY&s=Hc8Rr9rVyYDkVPrXtCMui16ZyzMgVVdzMsEE7-94Jww&e=&ref=thedelatorrereview.com),” about a facial recognition app that can help a user identify strangers and has been embraced by law enforcement.

- Reaction: Cybersecurity and tech writer Joseph Steinberg has [some tips on making yourself less recognizable](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D34%5F16132578-2Djosephsteinberg.com%5Fhow-2Dto-2Dprevent-2Dfacial-2Drecognition-2Dtechnology-2Dfrom-2Didentifying-2Dyou%5F-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=iC04AxprvjnjTpwgwrQL6S0K7PgnF6s8aTFuDQTXMUY&s=4n2pBjENHMjJW8YpTE8BCM2DPMm5KGBtVBKDfpisCb0&e=&ref=thedelatorrereview.com) to apps like Clearview.
- Twitter has [sent a letter to Clearview](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D34%5F16132582-2Dwww.nytimes.com%5F2020%5F01%5F22%5Ftechnology%5Fclearview-2Dai-2Dtwitter-2Dletter.html-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=iC04AxprvjnjTpwgwrQL6S0K7PgnF6s8aTFuDQTXMUY&s=nBYyxZPKFhTWWnqhtcl1EnLi%5F8TtdJM3R1wBFrY26S8&e=&ref=thedelatorrereview.com) telling the company to cease scraping photos and content from tweets, and delete any content it currently holds that was acquired from Twitter.
- Sen. Edward Markey (D-Mass) [has sent a bunch of questions to Clearview’s CEO](https://urldefense.proofpoint.com/v2/url?u=http-3A%5F%5Fmail01.tinyletterapp.com%5Fmisseli%5Fstrangelaw-2D34%5F16132586-2Dthehill.com%5Fpolicy%5Ftechnology%5F479564-2Ddemocratic-2Dsenator-2Dpresses-2Dfacial-2Drecognition-2Dcompany-2Dafter-2Dreports-2Dof-2Dlaw-3Fc-3Dee4000cb-2D9a84-2D449b-2Da69d-2Db6d58b3e68f3&d=DwMFaQ&c=iVyFbx9TtkoGWXYs40w9MA&r=Pgrq90vq1RKyD-pj5UUL7%5FBf%5FGcOTz6TPpDvrYpaJLU&m=iC04AxprvjnjTpwgwrQL6S0K7PgnF6s8aTFuDQTXMUY&s=2NkVu7Tff8X9-VbWbxv6mNALUtMHtMFP95O7uT2OLBM&e=&ref=thedelatorrereview.com), including who or what entities are in its customer base, what access do employees have and compliance with the Children’s Online Privacy Protection Act (COPPA).

[Worried About Privacy at Home? There’s an AI for That](https://www.wired.com/story/edge-ai-appliances-privacy-at-home/?ref=thedelatorrereview.com) (on Edge AI) by Clive Thomson for Wire Jan. 2020.

[How machine learning powers Facebook’s News Feed ranking algorithm](https://engineering.fb.com/2021/01/26/ml-applications/news-feed-ranking/?ref=thedelatorrereview.com)(Facebook engineering page)

[What is an algorithm? It depends on who you ask](https://www.technologyreview.com/2021/02/26/1020007/what-is-an-algorithm/?ref=thedelatorrereview.com). For better accountability, we should shift the focus from the design of these systems to their impact. By [Kristian Lum](https://www.technologyreview.com/author/kristian-lum/?ref=thedelatorrereview.com) and [Rumman Chowdhury](https://www.technologyreview.com/author/rumman-chowdhury/?ref=thedelatorrereview.com) for MIT Technology Review. February 26, 2021

[Can Auditing Eliminate Bias fromAlgorithms?](https://themarkup.org/ask-the-markup/2021/02/23/can-auditing-eliminate-bias-from-algorithms?ref=thedelatorrereview.com) By [Alfred Ng](https://themarkup.org/people/alfred-ng?ref=thedelatorrereview.com) for the Markup. February 23, 2021 08:00 ET

[NFTs and the Law: An “Explain it Like I’m Five” Overview](https://www.harriscountylawlibrary.org/ex-libris-juris/2021/3/9/mz3o6wbu5zlputegq4w5as6llogfb2?ref=thedelatorrereview.com) by the Harris County Law Library. March 9, 2021

OSU [Program on Data and Governance Final Report on Business Data Ethics](https://moritzlaw.osu.edu/data-and-governance/research-publications/?ref=thedelatorrereview.com)

OSU [Program on Data and Governance recordings of Webinar series on Business Data Ethics](https://u.osu.edu/dataethicsforum/register-for-the-webinars/?ref=thedelatorrereview.com)

Markulla Center for Applied Ethics, [An Ethical Toolkit for Engineering/Design Practice](https://www.scu.edu/media/ethics-center/technology-ethics/Ethics-Toolkit.pdf?ref=thedelatorrereview.com).

Microsoft Research-Carnegie Mellon, Co-Designing [Checklists to Understand Organizational Challenges and Opportunities around Fairness in AI](http://www.jennwv.com/papers/checklists.pdf?ref=thedelatorrereview.com).

[Proposed EU AI Regulation](https://digital-strategy.ec.europa.eu/en/library/proposal-regulation-laying-down-harmonised-rules-artificial-intelligence?ref=thedelatorrereview.com).

![](https://storage.ghost.io/c/54/ef/54efeb65-4f2f-479e-b4bb-a9ee526feeaa/content/images/2026/07/Screenshot-2026-07-04-at-4.45.19---PM-59.png)