Rights in Relation to Automated Decision Making and Profiling

Under the General Data Protection Regulation (GDPR), you have a number of rights regarding the way in which we are allowed to process your personal data.

What is automated individual decision-making and profiling?

Automated individual decision-making is a decision made by automated means without any human involvement.

Examples of this include:

  • an online decision to award a loan; and
  • a recruitment aptitude test which uses pre-programmed algorithms and criteria.

Automated individual decision-making does not have to involve profiling, although it often will do.

When can the Council carry out this type of processing?

Solely automated individual decision-making - including profiling - with legal or similarly significant effects is restricted, although this restriction can be lifted in certain circumstances.

We can only carry out solely automated decision-making with legal or similarly significant effects if the decision is:

  • necessary for entering into or performance of a contract between an organisation and the individual;
  • authorised by law (for example, for the purposes of fraud or tax evasion); or
  • based on the individual's explicit consent.

Submitting a request

An Information Rights Request under GDPR may be submitted in either of the following ways:

  • By submitting the online form under Apply for This Service below. 
  • By writing to Information Governance, Mendip District Council, Council Offices, Cannards Grave Road, Shepton Mallet, BA4 5BT

You must include your full name, a return address and a details of the information that you are requesting. Mendip District Council has a duty to verify the identity of requesters, and consequently you may be asked to provide proof of your identity.