Automated decision-making in use but no transparency disclosure in the policy
This check looks for signs that your site makes automated decisions with a real effect on people, such as instant approval, automated eligibility or underwriting, or algorithmic pricing, then checks whether your privacy policy explains this. Automated decision-making (ADM) means a computer system reaches an outcome with little or no human involvement. On this site, the check found signals of ADM in use, but the privacy policy has no section describing it, so visitors have no way to know a decision affecting them was automated.
Why this matters
Visitors may have no way to know that a computer rather than a person made a decision affecting them, or how to ask for a human to review it. Australia's Privacy Act reforms add automated decision-making transparency requirements, with the provisions scheduled to commence in December 2026, and the GDPR has related provisions under Article 22 for European visitors. Whether either applies depends on your business, size and where your customers are, so check with a privacy adviser.
How to fix it
Your privacy lawyer should add an 'Automated decision-making' section to the privacy policy if the rules apply to you, which is roughly half a day of work. It would name which decisions are automated, the effect on the person, how they can request a human review, and a plain-English summary of the logic used. If the Australian provisions apply to you, aim to have it live before they commence in December 2026.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit