Right to access information/logic about automated decision making in GDPR Art 15

Just found out about Article 15 of GDPR:

  1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  (h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

There's enough misalignment and ambiguity between the wording in here and how LLMs actually work to keep courts and lawyers busy for years to come I suppose.

I certainly wouldn’t HQ an AI company in the EU, or place any significant foreign investment there. The fines for GDPR non-compliance are non-trivial. And you only know if you’re fully complying with the GDPR if you have a legal team that can navigate the ambiguous definitions.

As a U.K. citizen I’m pleased that we have the opportunity to create better technical regulations that bring us closer to the innovation-friendly environment of the US