data subject shall be prohibited the data subject shall be prohibited Member State law to which the State law to which the controller is unless authorised by a law which unless authorised by a law which controller is subject and which subject and which provides also lays down measures to also lays down measures to provides appropriate safeguards for appropriate safeguards for the safeguard the data safeguard the data the rights and freedoms of the data rights and freedoms of the data subject’s subject’s legitimate interests. legitimate interests. subject, at least the right to obtain subject, at least the right to obtain human intervention on the part of human intervention on the part of the controller. the controller. 2. Automated processing of 2. Automated processing of 2. deleted 2. Decisions referred to in personal data intended to evaluate personal data intended to evaluate paragraph 1 shall not be based on certain personal aspects relating to certain personal aspects relating to special categories of personal data the data subject shall not be based the data subject shall not be based referred to in Article 8, unless solely on special categories of solely on special categories of suitable measures to safeguard the personal data referred to in personal data referred to in data rights and freedoms subject’s Article 8. Article 8. and legitimate interests are in place. 2a. Automated processing of (…) personal data intended to single out a data subject without an initial suspicion that the data subject might have committed or will be committing a criminal offence shall only be lawful if and to the extent that it is strictly necessary for the investigation of a serious criminal offence or the prevention of a clear and imminent danger, established on factual indications, to public security, the existence of the State, or the life of persons. 2b. Profiling that results in 2b. Profiling that, whether discrimination against individuals intentionally or otherwise, has the
data subject shall be prohibited unless authorised by a law which also lays down measures to safeguard the data subject’s legitimate interests. the data subject shall be prohibited unless authorised by a law which also lays down measures to safeguard the data subject’s legitimate interests. Member State law to which the controller is subject and which provides appropriate safeguards for the rights and freedoms of the data subject, at least the right to obtain human intervention on the part of the controller. State law to which the controller is subject and which provides appropriate safeguards for the rights and freedoms of the data subject, at least the right to obtain human intervention on the part of the controller. 2. Automated processing of personal data intended to evaluate certain personal aspects relating to the data subject shall not be based solely on special categories of personal data referred to in Article 8. 2. Automated processing of personal data intended to evaluate certain personal aspects relating to the data subject shall not be based solely on special categories of personal data referred to in Article 8. 2. deleted 2. Decisions referred to in paragraph 1 shall not be based on special categories of personal data referred to in Article 8, unless suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place. 2a. Automated processing of personal data intended to single out a data subject without an initial suspicion that the data subject might have committed or will be committing a criminal offence shall only be lawful if and to the extent that it is strictly necessary for the investigation of a serious criminal offence or the prevention of a clear and imminent danger, established on factual indications, to public security, the existence of the State, or the life of persons. (…) 2b. Profiling that, whether intentionally or otherwise, has the 2b. Profiling that results in discrimination against individuals
4_4column_table_EN.docx