The Right to Explanation is a data subject right under Article 22 of the GDPR and related provisions in Recital 71, granting individuals the ability to obtain meaningful information about the logic involved in solely automated decisions that produce legal or similarly significant effects. This right compels data controllers to disclose the underlying reasoning, significance, and envisaged consequences of algorithmic processing, moving beyond mere code disclosure to provide contestable, human-intelligible justifications.
Glossary
Right to Explanation

What is Right to Explanation?
The Right to Explanation is a data subject's legal entitlement under GDPR to obtain meaningful information about the logic involved in automated decisions, including the significance and envisaged consequences.
Fulfilling this right technically requires bridging the gap between opaque black-box models and human interpretability through techniques like SHAP, LIME, or counterfactual explanations. Privacy engineers must architect systems that can dynamically generate localized, context-specific explanations—often via automated decision logging and model cards—without exposing proprietary model weights or violating the trade secret exemptions that controllers may invoke under Recital 63.
Key Features of the Right to Explanation
The Right to Explanation empowers data subjects to obtain meaningful information about the logic involved in automated decisions. Below are the core technical and legal components that define this right.
Meaningful Information About the Logic
The controller must provide meaningful information about the logic involved, not just a complex mathematical formula. This requires translating algorithmic decision-making into human-understandable terms.
- Focuses on the rationale and reasoning, not the source code
- Must explain why a specific decision was reached
- Requires bridging the gap between model internals and lay comprehension
- Often fulfilled through counterfactual explanations (e.g., 'You were denied a loan because your debt-to-income ratio exceeded 40%. If it were below 36%, you would have been approved.')
Significance and Envisaged Consequences
The explanation must convey the significance and the envisaged consequences of the processing for the data subject. This goes beyond the logic to address the real-world impact.
- Must articulate the practical effects of the automated decision
- Includes the severity, scope, and duration of the impact
- Example: 'This credit denial will be reported to credit bureaus, potentially lowering your score by 50-100 points and affecting future loan applications for up to 7 years.'
- Requires a socio-technical assessment, not just a technical one
Specific, Not Generic Disclosure
Explanations must be specific to the individual data subject and the particular decision, not a generic description of the system's overall functionality.
- A generic model card or system overview is insufficient
- Must reference the actual input features that drove the specific outcome
- Requires local interpretability techniques like SHAP or LIME applied to the single inference
- Contrast with ex-ante explanations (before processing) which can be more general
Safeguards for Automated Decisions
The right is intrinsically linked to the requirement for suitable safeguards under Article 22(3). The explanation itself is a safeguard, but it must be supported by:
- Human intervention capability to contest the decision
- A clear mechanism for the data subject to express their point of view
- The ability to obtain human review of the automated decision
- These safeguards must be real and meaningful, not a rubber-stamp process
Algorithmic Transparency vs. Trade Secrets
The right to explanation exists in tension with the protection of intellectual property and trade secrets. Controllers cannot refuse an explanation solely on grounds of proprietary algorithms.
- Recital 63 states the right is not 'adversely affecting the rights and freedoms of others,' including trade secrets
- However, trade secret claims cannot be used to completely deny an explanation
- Controllers must find a balance, providing sufficient information without revealing the full model architecture
- Model-agnostic explanation techniques are critical for navigating this tension
Ex-Ante and Ex-Post Explanations
The right encompasses two temporal dimensions of explanation:
- Ex-Ante (Before Processing): Information provided at the point of data collection about the existence of automated decision-making, the logic involved, and the consequences. Required by Articles 13-15.
- Ex-Post (After Decision): Specific explanations of a particular decision after it has been made. Grounded in Article 22 and Recital 71.
- A robust compliance posture requires both layers of transparency
Frequently Asked Questions
Clear, technically precise answers to the most common questions about the GDPR's Right to Explanation, automated decision-making, and the technical requirements for meaningful algorithmic transparency.
The Right to Explanation is a data subject's entitlement under Articles 13-15 and 22 of the GDPR to obtain meaningful information about the logic involved in automated individual decision-making, including profiling. This right mandates that controllers disclose the existence of automated processing, provide meaningful information about the logic involved, and explain the significance and envisaged consequences of such processing for the data subject. Unlike a simple model card, this requires a counterfactual explanation tailored to the specific decision affecting the individual. The Article 29 Working Party (now the EDPB) clarified that controllers must provide sufficiently detailed explanations to allow the data subject to understand and contest the decision, not merely receive a complex mathematical formula. This right is distinct from the Right to Access in that it focuses specifically on the decision-making logic and its impact, not just the existence of the data.
Right to Explanation vs. Related Concepts
Distinguishing the Right to Explanation from adjacent transparency, interpretability, and access rights under the GDPR and AI governance frameworks.
| Feature | Right to Explanation | Data Subject Access Request (DSAR) | Algorithmic Explainability (XAI) |
|---|---|---|---|
Legal Basis | GDPR Articles 13-15, 22; Recital 71 | GDPR Article 15 | No direct legal mandate; driven by AI Act Art. 13 transparency requirements |
Primary Trigger | Solely automated decision with legal or similarly significant effects | Any personal data processing by a controller | Model deployment, audit, or debugging need |
Information Scope | Logic, significance, and envisaged consequences of the specific automated decision | Confirmation of processing, categories of data, recipients, and a copy of the data | Model internals: feature weights, decision boundaries, counterfactuals |
Target Audience | Data subject (individual affected by the decision) | Data subject (individual requesting access to their data) | Data scientists, auditors, compliance officers, and regulators |
Temporal Focus | Ex-ante (before decision) and ex-post (after decision) meaningful information | Ex-post (after processing has occurred) | Ex-ante (during development) and ex-post (during monitoring) |
Output Format | Plain-language, human-readable narrative explanation | Structured data inventory and raw personal data copy | Feature importance plots, SHAP values, LIME explanations, decision trees |
Technical Implementation | Automated decision logging combined with natural language generation of logic | Identity verification, data discovery, and secure data export pipelines | Model introspection libraries, surrogate models, and saliency maps |
Scope of Automation | Applies only to decisions made without any meaningful human intervention | Applies regardless of automation level | Applies to any model, regardless of whether it drives automated decisions |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Related Terms
Mastering the Right to Explanation requires understanding the technical mechanisms that make algorithmic decisions interpretable and the legal frameworks that mandate them.
SHAP (SHapley Additive exPlanations)
A game-theoretic approach to model interpretability that assigns each input feature an importance value for a particular prediction. Based on Shapley values from cooperative game theory, SHAP fairly distributes the prediction outcome among the features.
- Mechanism: Computes the marginal contribution of each feature across all possible feature subsets
- Output: A force plot showing which features pushed the prediction higher or lower from the base rate
- Use Case: Explaining why a specific customer received a high churn risk score in a retention model
LIME (Local Interpretable Model-agnostic Explanations)
A technique that approximates any black-box classifier with a locally faithful, interpretable model around a specific prediction. LIME perturbs the input instance, observes prediction changes, and trains a simple surrogate model like a sparse linear model.
- Key Property: Model-agnostic — works on any classifier without accessing its internals
- Output: A weighted list of the most influential features for that single prediction
- Limitation: Local fidelity does not guarantee global understanding of the model's overall behavior
Automated Decision-Making (Article 22 GDPR)
The legal foundation for the Right to Explanation. Article 22 prohibits decisions based solely on automated processing that produce legal effects or similarly significant impacts. When such processing is permitted, the controller must implement safeguards including the right to obtain human intervention and a meaningful explanation of the logic involved.
- Trigger: No meaningful human involvement in the decision loop
- Scope: Credit denials, e-recruiting, and behavioral advertising profiling
- Recital 71: Explicitly mentions the right 'to obtain an explanation of the decision reached'
Model Cards
Structured transparency documents proposed by Google that accompany trained machine learning models. A model card discloses the intended use, evaluation results, ethical considerations, and limitations of a model in a standardized format.
- Sections: Model details, intended use, factors, metrics, evaluation data, training data, quantitative analyses, ethical considerations, and caveats
- Purpose: Enables downstream users to assess fitness-for-purpose without reverse-engineering the model
- Standard: Increasingly referenced in regulatory guidance as a best practice for transparency documentation
Algorithmic Recourse
The ability for a data subject to understand and act upon an adverse automated decision to change the outcome. Recourse goes beyond passive explanation to provide actionable pathways for remediation.
- Contrastive Nature: Focuses on what the individual can realistically change
- Feasibility Constraints: Must respect immutable characteristics and causal relationships
- Implementation: Often delivered via counterfactual explanation engines integrated into the decision workflow

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us