GDPR Article 22 gives data subjects "the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her." This protection has narrow exceptions: contracts where automation is necessary, decisions authorized by law with safeguards, and explicit consent.
In every excepted case, the data subject retains the right to obtain human intervention, to express their point of view, and to contest the decision. Article 22 is the European legal foundation for an enforceable right to explanation for automated decisions in scope.