The GDPR Article 22 criterion for decisions that trigger the provision's protections. A decision is solely automated when human involvement is nominal rather than genuine — when a human cannot actually influence the decision's outcome through their review.