§ GDPR · Article 22

GDPR Article 22: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 22 · All obligations · GDPR

At a glance

Article 22 of the GDPR imposes 2 obligations on data controller.

§ Obligations

All obligations under Article 22

Obligation 1

The data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, including the right to obtain human intervention, express their point of view, and contest the decision. Regulation (EU) 2016/679, Article 22, Article 22

Obligated entity: data controller
Action required: implement
Deadline: —
Penalty: —

Obligation 2

Decisions based on automated processing shall not be based on special categories of personal data unless specific conditions in Article 9(2) apply and suitable measures to safeguard the data subject's rights are in place. Regulation (EU) 2016/679, Article 22, Article 22

Obligated entity: data controller
Action required: ensure
Deadline: —
Penalty: —

§ Frequently asked

Questions about Article 22

Who must comply with Article 22 of the GDPR? +

data controller.

What does Article 22 of the GDPR require? +

implement ensure

Need a cross-border briefing on GDPR Article 22?

Search Fontvera ↵

All EU obligation pages · All GDPR articles