AI incident
Solely-automated decision without safeguards
Various (GDPR fines) · 2023
Organisation
Various (GDPR fines)
Year
2023
Failure mode
Unlawful automated decision
Severity
major
Domain
Credit & financial scoring
Agentic
Yes — an AI system acting, not just advising
Source
EU DPA decisions
What happened
Automated decisions with legal effect made without the right to human review drew enforcement.
What would have prevented it
Art. 22 safeguards: meaningful human review + contest
Requirements this maps to
Editorial cross-reference from our prevention note — it is not a finding that any law was breached.