s.36-37 — Objection and automated decision-making

Requirement

A data subject may object to processing, including for direct marketing (s.36), and has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, subject to the Act's exceptions and safeguards including human intervention (s.37).

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.