AEPD revises guidance on automated decision-making

Spain's data protection authority, the Agencia Española de Protección de Datos, released updated guidance on how to evaluate human intervention in automated decision-making under the EU General Data Protection Regulation. The guidelines, last updated in 2018, suggest a review of "authority, competence, capacity, diligence or independence" as part of compliance with Article 22 of the GDPR.