The Consequences Explained

Where the organisation makes solely automated decisions about the person, the response states the significance of those decisions and their likely consequences.

Criterion: E10
Level: Level 1
Domain: Supplementary Information
Reflects: Article 15(1)(h)

Intent

Knowing how a decision was reached is of little use without knowing what it does to the person: what they were refused, charged, or ranked for.

How to test it

An assessor scores the criterion against a single response:

Score 2: The response states what the decisions mean for the person and what follows from them.
Score 1: The response describes the consequences in general terms that are not about this person.
Score 0: The response says nothing about the significance or consequences of the decisions.
Not applicable: The organisation makes no solely automated decisions about the person.

The law it reflects

This criterion reflects Article 15(1)(h) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See E10 in context in the full standard.