- An activity must involve “an automated form of processing;”
- An activity must be “carried out on personal data;”
- The objective of the activity must be “to evaluate personal aspects about a

Updates on the Evolving Data Protection Landscape
It depends.
While most modern data privacy statutes allow individuals to request access to the personal information held by an organization about the individual, they do not confer upon individuals a right to understand how or why a business has made decisions about them. That said, one privacy statute – the California Privacy Rights Act…