Automated decision-making disclosures start on 10 December 2026
Privacy policies must soon explain certain decisions that computer programs make, or substantially help make, about individuals. Most organisations have not yet mapped where those decisions happen.