A data subject shall have the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal or similar significant effects concerning the data subject.

Subsection (1) shall not apply, where the decision is — (a) necessary for entering into or the performance of a contract between the data subject and a data controller; (b) authorised by a written law, which establishes suitable measures to safeguard t...

The data controller shall implement suitable measures to safeguard the data subject’s fundamental rights, freedoms and interests, including the rights to — (a) obtain human intervention on the part of the data controller; (b) express the data sub...