According to the GDPR, what is an effective control to prevent a determination based solely on automated decision-making?

According to the GDPR, what is an effective control to prevent a determination based solely on automated decision-making?
A . Provide a just-in-time notice about the automated decision-making logic.
B . Define suitable measures to safeguard personal data.
C . Provide a right to review automated decision.
D . Establish a human-in-the-loop procedure.

Answer: D

Explanation:

The GDPR requires that individuals have the right to not be subject to decisions based solely on automated processing, including profiling, unless specific exceptions apply. One effective control is to establish a human-in-the-loop procedure (D), ensuring human oversight and the ability to contest decisions. This goes beyond just-in-time notices (A), data safeguarding (B), or review rights (C), providing a more robust mechanism to protect individuals’ rights.