Right to human review of automated decisions

For any decision by a covered entity based solely on automated processing of personal information of an individual, if such processing materially increases reasonably foreseeable significant privacy harms for such individual, such covered entity shall— (1) inform such individual of what personal information is being or may be used for such decision; (2) make available a reasonable mechanism by which such individual may request human review of such decision, upon request or in a publicly accessible location; and (3) if such individual requests such a review, conduct such review within a reasonable amount of time after such request.