Skip to content
EN

Lesson 2 of 8 · 6 min · +100 XP

What are your rights when AI decides about you?

Automated, or AI, decision-making means a computer decides about you without real human involvement. Under UK and EU data protection law, for significant decisions you can ask for information, give your view, get a human review and challenge the result. In the US, a lender that turns you down must tell you why, or how to ask.

▶ Try it

Why it matters

Algorithms already help decide who gets a loan, an interview or a flat. They can be fast and fair, or wrong and biased. Knowing your rights turns a silent "rejected" into a decision you can question.

In 6 minutes you'll be able to

  • Fast, wordless rejections are often automated, so ask.
  • Ask for the reasons, a human review and a way to challenge.
  • Check your data, put requests in writing and keep copies.

What you'll practise

  1. Who really decided?

    Tap each card to see what it means for you.

    🤖 Solely automated
    A computer makes the decision and no person meaningfully checks it. This is where special rights kick in.
    🖱️ The rubber stamp
    A person clicks "approve" on whatever the system says, without the power or time to disagree. That still counts as automated.
    ⚖️ Significant effect
    The rights matter most for decisions with real effects: credit, jobs, benefits, housing, a place at school.
    🔎 Profiling
    Using your data to predict things about you, such as how reliable a borrower or how good a worker you'll be. It often feeds automated decisions.

  2. Read the rejection

    Priya's rejection email. Tap every part that helps her use her rights.

    NovaBank Loans
    Thank you for applying to NovaBank.
    We are unable to offer you a loan at this time. This decision was made automatically.
    Main reasons: short credit history, high existing card balance.
    You can ask for a member of our team to review this decision.
    To share more information or challenge the decision, reply within 30 days.

  3. What can they do?

    Three people, three automated decisions.

    1. In the UK, Marcus's job application is rejected by an automatic CV filter. What can he do?

      • Ask how it was decided and request a human review (Answer)
      • Nothing, a computer's decision is final

    2. In the US, Jamal is turned down for a credit card. What must the lender give him?

      • The reasons for the denial, or how to ask for them (Answer)
      • A full copy of the lender's algorithm

    3. A manager approves every result the AI suggests without reading it. Is a human involved?

      • Not meaningfully, so it still counts as automated (Answer)
      • Yes, a person clicked the button

  4. Said no? Do this

    A computer turned you down. Put the steps in a sensible order.

    1. Read the decision and note the reasons and any deadline
    2. Check that the data about you is correct
    3. Ask in writing for a human review and add your side
    4. Keep copies of everything and the dates
    5. No fair answer? Complain to the organisation, then to the regulator

Remember

A computer said no? You can usually ask why, and ask a human to look again.

Key facts

  • Article 22 of the EU GDPR gives people the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects, with exceptions such as a contract, a law or explicit consent. · Source: EU General Data Protection Regulation (2016/679), Article 22
  • The UK's Data (Use and Access) Act 2025 allows significant automated decisions in more situations, but organisations must give information, let you give your view, offer human intervention and let you contest the decision. · Source: ICO, Data (Use and Access) Act 2025 summary of changes, 2026
  • In 2023, the EU Court of Justice ruled that a credit score can itself count as an automated decision when lenders rely on it heavily to grant or refuse credit. · Source: Court of Justice of the EU, Case C-634/21 (SCHUFA), 7 December 2023
  • Under the US Equal Credit Opportunity Act, a lender that denies credit must give the specific reasons or tell the applicant how to request them. · Source: US Equal Credit Opportunity Act and Regulation B
  • A human review only counts if the reviewer has the authority and ability to change the decision. A rubber stamp is not enough. · Source: ICO, Guidance on AI and data protection

Updated:

Questions people ask

Can I ask for a human to review an automated decision?

In the UK and EU, usually yes for decisions with legal or similarly significant effects, such as on credit or a job. Ask the organisation in writing; it should tell you how.

Do I have a right to an explanation of an AI decision?

Under UK and EU data protection law you can get meaningful information about how a significant automated decision was made. In the US, lenders must give the main reasons for denying credit.

What is an adverse action notice?

In the US, it's the notice a lender must send when it turns you down or offers worse terms. It gives the reasons, or how to get them, and tells you if a credit report was used.

Who can I complain to about an automated decision?

Complain to the organisation first. In the UK you can then go to the ICO; in the US, credit complaints can go to the Consumer Financial Protection Bureau. For a specific case, get independent advice.

Related terms