Your rights

10. Automated decisions

In general, decisions which effect you legally or have similarly significant effects are not permitted using solely automated processing, especially if this involves the use of personal information which because of its nature, is termed ‘special’ or ‘sensitive’. This is because decisions made using automated electronic programmes or software do not involve human beings.

There are some exceptions where automated decision-making is allowed. This is where the processing is:

  • based on your explicit consent
  • necessary for entering into or the performance of a contract with you
  • required or authorised by law

Where an automated decision is made about you, you have the right to be:

  • told that our processing activity involves automated decision making and to be informed about the logic involved and the likely consequences of the processing for you
  • what measures and safeguards we have implemented to protect your privacy

You can:

  • contest the automated decision and/or
  • ask that the automated decision be reconsidered by an appropriate person with the authority/seniority to reach a decision that is not only based on automated processing

Use the button below to download the form to contest and or review a decision made by automated means:

Contest and or review a decision made by automated means form (PDF 304Kb)

Please return your form along with any additional information and copies of your evidence to our Data Protection Officer (DPO) by emailing us at or by post to the address below:

Information Governance Team
Lower Ground Floor
Stopford House

If you contest an automated decision and ask for it to be reconsidered, we will respond within 1 month and let you know whether or not this has led to the same or a new outcome.

We will also explain your right to complain to the Information Commissioner if you are not satisfied.

Data protection