Berktaş, Ahmet EsadFeyzioğlu, Saide Begüm2025-02-202025-02-2020242509-7873https://doi.org/10.1007/978-981-99-6327-0_4https://hdl.handle.net/20.500.12846/1730Various legislation regarding data protection acknowledges the right to protection of personal data as fundamental human right and introduces certain legal obligations to people who have access to personal data to prevent this data to be used without data subject’s knowledge and even in some cases their consent. Processing personal data by automated decision-making (ADM) systems bears the risk of discrimination. Especially, when these ADM systems use Artificial Intelligence (AI) and machine learning technologies, natural persons’ data may be fed into the system to train the model. Hence, natural persons’ personal data constitutes a basis for ADM systems’ decisions. Data protection legislation includes certain general principles and measures to prevent misjudgments and discrimination. In the scope of these principles and measures, data processing activity shall be adequate, relevant, and limited in relation to the intended purposes, “privacy by design” and “privacy by default” principles and objection mechanisms regarding negative decisions taken exclusively by ADM systems shall be implemented, accountability and risk-based approach shall be considered. On the other hand, data protection legislation may not be sufficient to eliminate all the risks and threats of AI. Hence, specific regulations, guidelines, and recommendations addressing AI are being drafted. © The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd 2024.eninfo:eu-repo/semantics/closedAccessArtificial intelligenceDiscriminationProtection of personal dataBook PartPart F158510.1007/978-981-99-6327-0_45568Q42-s2.0-85175199282