Section 50B | Restrictions on automated decision-making based on sensitive processing F1
From legislation.gov.uk
(1)A significant decision based entirely or partly on sensitive processing may not be taken based solely on automated processing, unless one of the following conditions is met.
(2)The first condition is that the decision is based entirely on processing of personal data to which the data subject has given explicit consent.
(3)The second condition is that the decision is required or authorised by law.