Data and digital operations · France and Switzerland : separate country-labelled rules
Automated decisions: information and review routes
An automated refusal should be separated into the decision itself, the data used, its effects and any genuine human involvement. France's GDPR and Switzerland's LPD do not supply an interchangeable checklist. Preserve the notice and explanations received, then distinguish data-access requests from review of the merits. A moderation appeal under the DSA is a separate route.
- Official texts cited
- Sources checked on
- Drafted with AI assistance, our method
General legal information with official references and dated checks. It is not personalised advice: for a decision that commits you, have your situation checked by a qualified professional.
Julie by AlphaDeep
Your question concerns “Automated decisions: information and review routes”. I can help organise the facts and records. Which document have you received or prepared, and is this a French or Swiss matter?
3 free questions at signup. Avoid names and sensitive information.
Which automated decision is disputed?
Keep the decision, date and actual effect. France's GDPR22 and Swiss LPD21 concern their own legally or significantly affecting automated decisions.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Which official provision helps explain this situation?
Aucune décision produisant des effets juridiques à l'égard d'une personne ou l'affectant de manière significative ne peut être prise sur le seul fondement d'un traitement automatisé de données à caractère personnel, y compris le profilage, à l'exception :
In plain English: No. It contains specified contract, legal-authorisation and explicit-consent branches and safeguards. Check the actual basis rather than treating every score identically.

Does a score prove exclusive automation?
No. Describe its role and any meaningful human involvement. Software use alone does not establish an exclusively automated decision.
What information was provided about the process?
Keep notices and explanations. French GDPR information duties and Swiss LPD information or access duties have separate conditions.
Which records are still missing from your file?
Indicate which records you have. The result identifies gaps and prepares a complete question for Julie, without requiring an account.
Fictional example · Your preparation
Point to complete: Human-review request. Identify the decision, disputed point and records to consider. Available safeguards depend on the applicable regime and exceptions; review does not guarantee approval.
- Decision and effects
- Record available
- Role of automation
- Record available
- Available information
- Record available
- Human-review request
- Needs checking
- Records indicated
- 3 / 4
- How should a human-review request be prepared?
This worksheet organises records; it does not establish admissibility, entitlement or a procedural outcome.
How should a human-review request be prepared?
Identify the decision, disputed point and records to consider. Available safeguards depend on the applicable regime and exceptions; review does not guarantee approval.
Is GDPR22 an absolute algorithm ban?
No. It contains specified contract, legal-authorisation and explicit-consent branches and safeguards. Check the actual basis rather than treating every score identically.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Which documents answer which questions?
| Record or information | Issue to check |
|---|---|
| Decision and effects | Keep the decision, date and actual effect. France's GDPR22 and Swiss LPD21 concern their own legally or significantly affecting automated decisions. |
| Role of automation | No. Describe its role and any meaningful human involvement. Software use alone does not establish an exclusively automated decision. |
| Available information | Keep notices and explanations. French GDPR information duties and Swiss LPD information or access duties have separate conditions. |
| Human-review request | Identify the decision, disputed point and records to consider. Available safeguards depend on the applicable regime and exceptions; review does not guarantee approval. |
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
What does Swiss LPD21 require separately?
It provides information and requested opportunities for views and human review in its scope, subject to exceptions and federal-body qualifications.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Which facts should remain unproven until evidenced?
A standard reply, poor explanation and exclusive automation are different matters. None automatically proves all the others.
What can the preparation worksheet deliver?
It organises decision, effects, human involvement and the request. It does not disclose source code or automatically overturn a refusal.
What other questions arise in this file?
Does a score prove exclusive automation?
No. Describe its role and any meaningful human involvement. Software use alone does not establish an exclusively automated decision.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
How should a human-review request be prepared?
Identify the decision, disputed point and records to consider. Available safeguards depend on the applicable regime and exceptions; review does not guarantee approval.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Is GDPR22 an absolute algorithm ban?
No. It contains specified contract, legal-authorisation and explicit-consent branches and safeguards. Check the actual basis rather than treating every score identically.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Which facts should remain unproven until evidenced?
A standard reply, poor explanation and exclusive automation are different matters. None automatically proves all the others.
Loi Informatique et Libertés art. 47RGPD, article 22: Décision individuelle automatiséeRGPD, article 13: Information lors de la collecte235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatisée235.1 : Art. 25 Droit d’accèsCNIL : RGPD, article 22 and recital 71
Which official references should you consult?
- Loi Informatique et Libertés art. 47Légifrance
- RGPD, article 22: Décision individuelle automatiséeSource officielle
- RGPD, article 13: Information lors de la collecteSource officielle
- 235.1 : Art. 21 Devoir d’informer en cas de décision individuelle automatiséeFedlex
- 235.1 : Art. 25 Droit d’accèsFedlex
- CNIL : RGPD, article 22 and recital 71Source officielle
Texts cited last checked: 1 November 2026