Abstract
The article addresses the problem of constructing a legal framework for automated decision-making. The algorithms on which automated decision-making is based, are increasingly becoming unintelligible and their application entails significant risks. In order to minimise those risks, the GDPR regulates automated data-processing and decision-making. While legal requirements for automated decision-making have been already discussed in Polish literature, less attention has been paid in this context to the specific content and functioning of protection for individual rights. The purpose of this article is, therefore, to take position on this matter, in particular by reconstructing the debate waged in foreign literature.