Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation

Since approval of the EU General Data Protection Regulation (GDPR) in 2016, it has been widely and repeatedly claimed that the GDPR will legally mandate a ‘right to explanation’ of all decisions made by automated or artificially intelligent algorithmic systems. This right to explanation is viewed as...

Бүрэн тодорхойлолт

Номзүйн дэлгэрэнгүй
Үндсэн зохиолчид: Wachter, S, Mittelstadt, B, Floridi, L
Формат: Journal article
Хэвлэсэн: Oxford University Press 2017
_version_ 1826277680615522304
author Wachter, S
Mittelstadt, B
Floridi, L
author_facet Wachter, S
Mittelstadt, B
Floridi, L
author_sort Wachter, S
collection OXFORD
description Since approval of the EU General Data Protection Regulation (GDPR) in 2016, it has been widely and repeatedly claimed that the GDPR will legally mandate a ‘right to explanation’ of all decisions made by automated or artificially intelligent algorithmic systems. This right to explanation is viewed as an ideal mechanism to enhance the accountability and transparency of automated decision-making. However, there are several reasons to doubt both the legal existence and the feasibility of such a right. In contrast to the right to explanation of specific automated decisions claimed elsewhere, the GDPR only mandates that data subjects receive meaningful, but properly limited, information (Articles 13-15) about the logic involved, as well as the significance and the envisaged consequences of automated decision-making systems, what we term a ‘right to be informed’. Further, the ambiguity and limited scope of the ‘right not to be subject to automated decision-making’ contained in Article 22 (from which the alleged ‘right to explanation’ stems) raises questions over the protection actually afforded to data subjects. These problems show that the GDPR lacks precise language as well as explicit and well-defined rights and safeguards against automated decision-making, and therefore runs the risk of being toothless. We propose a number of legislative and policy steps that, if taken, may improve the transparency and accountability of automated decision-making when the GDPR comes into force in 2018.
first_indexed 2024-03-06T23:32:34Z
format Journal article
id oxford-uuid:6c90bb41-093c-417b-852a-7716054e44bb
institution University of Oxford
last_indexed 2024-03-06T23:32:34Z
publishDate 2017
publisher Oxford University Press
record_format dspace
spelling oxford-uuid:6c90bb41-093c-417b-852a-7716054e44bb2022-03-26T19:11:41ZWhy a right to explanation of automated decision-making does not exist in the General Data Protection RegulationJournal articlehttp://purl.org/coar/resource_type/c_dcae04bcuuid:6c90bb41-093c-417b-852a-7716054e44bbSymplectic Elements at OxfordOxford University Press2017Wachter, SMittelstadt, BFloridi, LSince approval of the EU General Data Protection Regulation (GDPR) in 2016, it has been widely and repeatedly claimed that the GDPR will legally mandate a ‘right to explanation’ of all decisions made by automated or artificially intelligent algorithmic systems. This right to explanation is viewed as an ideal mechanism to enhance the accountability and transparency of automated decision-making. However, there are several reasons to doubt both the legal existence and the feasibility of such a right. In contrast to the right to explanation of specific automated decisions claimed elsewhere, the GDPR only mandates that data subjects receive meaningful, but properly limited, information (Articles 13-15) about the logic involved, as well as the significance and the envisaged consequences of automated decision-making systems, what we term a ‘right to be informed’. Further, the ambiguity and limited scope of the ‘right not to be subject to automated decision-making’ contained in Article 22 (from which the alleged ‘right to explanation’ stems) raises questions over the protection actually afforded to data subjects. These problems show that the GDPR lacks precise language as well as explicit and well-defined rights and safeguards against automated decision-making, and therefore runs the risk of being toothless. We propose a number of legislative and policy steps that, if taken, may improve the transparency and accountability of automated decision-making when the GDPR comes into force in 2018.
spellingShingle Wachter, S
Mittelstadt, B
Floridi, L
Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title_full Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title_fullStr Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title_full_unstemmed Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title_short Why a right to explanation of automated decision-making does not exist in the General Data Protection Regulation
title_sort why a right to explanation of automated decision making does not exist in the general data protection regulation
work_keys_str_mv AT wachters whyarighttoexplanationofautomateddecisionmakingdoesnotexistinthegeneraldataprotectionregulation
AT mittelstadtb whyarighttoexplanationofautomateddecisionmakingdoesnotexistinthegeneraldataprotectionregulation
AT floridil whyarighttoexplanationofautomateddecisionmakingdoesnotexistinthegeneraldataprotectionregulation