01
Scope of application & addressees
- Businesses using profiling, recommendation, scoring, pricing or risk models
- Platforms using automated decisions for information feeds or marketing
- Organisations making automated decisions with a significant impact on individual rights
02
Core regulatory mandates & key requirements
01Automated decision processes must be transparent and their results fair and impartial.
02Recommendation and marketing services must offer a non-personalised option or a convenient refusal route.
03Individuals may request an explanation and refuse decisions made solely through automation where the decision has a significant impact.
03
Enforcement & compliance timeline
The Personal Information Protection Law was promulgated.
The Law, including Article 24, entered into force.