Question to the Ministry of Defence:

To ask the Secretary of State for Defence, how individuals are informed that decisions have been taken in (a) whole and (b) part by automated means in the context of the Data (Use and Access) Act 2025.

The Ministry of Defence (MOD) ensures compliance with legal requirements regarding Automated Decision-Making (ADM) through a range of measures. The MOD provides clear information about its use of ADM in its public Privacy Notice. When personal data is processed through ADM, individuals are informed in accordance with applicable data protection legislation and MOD internal policies. The public Privacy Notice details the circumstances under which automated decision-making may be employed and outlines the rights available to individuals. In cases where a significant decision is made solely by automated means, individuals are notified prior to the processing and, where required by law, are given the opportunity to request a human review or reconsideration of the decision. The MOD strictly ensures that no individual is subject to decisions producing significant effects based solely on automated decision-making unless there is a lawful basis for such processing and all relevant statutory safeguards are fully implemented. The Data Protection Impact Assessment process is used to assess risks and ensure that appropriate safeguards are in place.