On 23 July 2025, the Dutch Data Protection Authority published guidance on implementing meaningful human intervention in automated decision-making systems under Article 22 of the General Data Protection Regulation. The guidance applies to data controllers across all sectors who deploy algorithms for individual decision-making that produce legal effects or significantly affect data subjects. The Authority establishes a four-pillar framework requiring human assessors to consider all relevant factors beyond algorithmic inputs and possess adequate Artificial Intelligence (AI) literacy. It mandates clear technology interfaces that prevent automation bias and present data contextually. The guidance requires appropriate process timing, manageable workloads, and genuine authority to override decisions. It also demands documented governance policies, comprehensive training programmes, and ongoing monitoring through metrics, including override rates.
Original source