[cauthon]

I think you’re referring to GDPR article 22, which prohibits decisions based solely on automated processing but imposes no constraints on the transparency of such processing. [1]

[1] https://gdpr-text.com/read/article-22/