When does GDPR Article 22 apply?

It applies when a decision is based solely on automated processing — including profiling — and produces legal effects or similarly significantly affects a person, such as credit, employment, insurance, or access decisions. If a human meaningfully reviews the decision, the strict Article 22 regime usually does not apply, though transparency duties still do.

What must the notice contain?

Under Articles 13–15 and 22 you must give meaningful information about the logic involved, the significance and envisaged consequences for the individual, and tell them about their rights to obtain human intervention, express their view, and contest the decision. This generator structures all of these.

What counts as the lawful basis for an automated decision?

Article 22 only permits solely-automated significant decisions where they are necessary for a contract, authorised by law, or based on explicit consent — and you must put safeguards in place. The notice asks you to state which of these you rely on so it is explicit.

Is this legal advice or a guaranteed-compliant notice?

No. It produces a well-structured draft aligned with Article 22 requirements, but compliance depends on your actual processing, safeguards, and lawful basis. Have a DPO or counsel review it and confirm your underlying process is lawful.

Is anything I type uploaded?

No. The notice is assembled entirely in your browser from your inputs and nothing is sent or stored, so you can draft using real internal details about your decision system.

What is the GDPR Article 22 Automated Decision Notice Generator?

Describe your automated AI decision and generate a GDPR Article 22 compliant notice covering the decision logic, significance, consequences, and user's right to human review and challenge — formatted for privacy notices. It runs free in your browser on Gera Tools, with nothing uploaded.

GDPR Article 22 Automated Decision Notice Generator

Name: GDPR Article 22 Automated Decision Notice Generator
Creator: Gera Tools
License: https://creativecommons.org/licenses/by/4.0/

Get one useful tool a week

Like this tool? Enter your email and we'll send you one genuinely useful Gera tool a week — plus a link to come back to this one. No spam, one-click unsubscribe any time.

Generate the Article 22 notice you are required to give

If an AI system makes a solely automated decision that has legal or similarly significant effects on someone — credit, hiring, insurance, access — GDPR Article 22 and the transparency articles require you to tell them: the logic involved, the significance and consequences, and their rights to human review, to express their view, and to contest the outcome. This tool turns your description of the decision into a structured, copy-ready notice. It assembles the text in your browser; nothing you enter is sent anywhere.

What the notice must cover

Under Articles 13 and 14 (privacy notices) and Article 22 (automated decision rights), you must provide the following information when solely automated decisions produce legal or significant effects:

The existence of automated decision-making — including profiling — and meaningful information about the logic involved.
The significance and envisaged consequences for the individual, in plain terms (not legalese).
The right to obtain human intervention — a real review by a competent person with authority to override.
The right to express their point of view before or after the decision.
The right to contest the decision and a clear route to do so.

The generated notice structures all five into copy you can paste into a privacy notice or into a decision-point disclosure shown at the moment of the automated determination.

How it works

You describe what the AI decides, summarise the meaningful logic (the main factors it weighs, in plain language — not the source code), name the affected individuals, describe the consequences, and select the lawful basis you rely on (contract, legal authorisation, or explicit consent). The generator composes a notice with the required sections: what the decision is, how it is made, why it matters to the person, the lawful basis and safeguards, and a clear statement of the rights to human intervention and to contest. A copy button drops it into your privacy notice or decision-point disclosure.

Where to display it

An Article 22 notice can appear in two places, and ideally both:

Privacy notice — a standing section that tells all data subjects the system exists and that they may be subject to automated decisions.
Decision-point disclosure — a notice shown to the individual at the moment their specific decision is made, explaining the outcome and their rights. This is the format that directly protects the individual and is most useful for meeting contest rights.

For high-volume automated decisions (e.g., credit applications, insurance pricing), many organisations maintain both a generic privacy-notice section and a per-decision disclosure generated at runtime.

Tips and notes

“Meaningful logic” means plain language. Describe the key factors, not an algorithm dump. “Your application was assessed using credit history, payment behaviour over the last 24 months, and current debt-to-income ratio” is meaningful. “A machine learning model was applied” is not.
Solely automated is the trigger. If a human meaningfully reviews each decision, the strict regime may not apply — but you still owe transparency.
State a valid lawful basis. Significant automated decisions need contract, legal authorisation, or explicit consent plus safeguards.
Get it reviewed. This is a structured draft, not a compliance sign-off for your specific process.