Meaningful Human Intervention Is a Design Problem
Uber is the case, but the issue here is the design of the human checkpoint the Dutch Data Protection Authority says was missing. The useful question is not whether a platform can add a reviewer’s name to a workflow. It is whether that person can see relevant context, understand the automated output, exercise independent judgment, and alter the account decision before it cuts off work. The AP’s guidance supplies a practical way to test that claim without pretending that every human review is meaningful.
Article 22 uses the word “solely” because the presence of a person can change the legal character of a process. But that change depends on what the person actually does. A reviewer who simply confirms an outcome already fixed by software may add a human gesture without adding human decision-making. A reviewer who can inspect the individual circumstances, correct the inputs, reject the output, and decide before the consequence takes effect has a different role.
A reviewer needs judgment, information, and competence
The AP begins from a simple distinction: decision-making is solely automated when it occurs through technological means without human involvement, and a controller cannot avoid Article 22 by fabricating involvement. Oversight must be meaningful rather than a token gesture. The guidance is not a binding judicial formula, and it does not decide on its own whether an outcome is a “decision” or significantly affects someone. It addresses the next practical question: what would make a human contribution real enough to matter?
The first requirement is room for judgment. An assessor must be able to consider all information relevant to the decision, not only the variables that the algorithm happened to process. That may include information supplied by the person affected or facts that are difficult to express as structured data. If the assessor has no ability to add, correct, or weigh another factor, the review may be only a repetition of the automated result.
This matters directly to driver deactivation. A customer rating or a fraud signal is a classification, not a complete account of what happened. The sources do not tell us which circumstances a driver could have offered to Uber, or whether any such information was available to a reviewer. The AP guidance gives us the relevant design question without answering it for the historical Uber system: could an assessor consider circumstances that were absent from the software’s input, or was the assessor limited to accepting the same data and conclusion?
The difference can be expressed through a hypothetical. Suppose a driver’s account is flagged after a cluster of low reviews. A purely nominal review might display the rating total and ask an employee to click “confirm.” A meaningful review could allow the assessor to examine the relevant trip context, identify whether the information is complete, consider an explanation from the driver, and decide whether the trigger should change the account state. The example does not claim that Uber used either interface. It shows why the ability to consider additional information is part of the intervention, not an optional courtesy after the decision.
Human discretion is the second requirement. The AP describes discretion as the capacity to account for exceptions, context, and human dignity rather than reducing an individual situation to a few variables. An algorithm can reflect general patterns; a human can sometimes recognize a particular circumstance that the pattern does not represent. If the process leaves no room for an assessor to depart from the rule, the person may be present but the decision can remain automated in substance.