Rights Protections in Automated Public Systems
From an appeal promise to a decision system that can be corrected
An operational rights model for verifying legal rules, preserving discretion, testing unequal error, funding accessible review, and repairing failures across affected cases.
September 20268 sourcesFoundation synthesis
Download full paper (Markdown) ↗
Findings
What the evidence supports.
Source markers link findings to the evidence below.
01
Authority to decide and authority to automate are separate questions
Australia’s 2025 Automated Decision-Making Better Practice Guide distinguishes legislative authority for a decision from authority to automate it. It warns against automating discretion without independent external legal advice and emphasizes maintaining administrative-law principles. This is Australian agency guidance, not a general judicial ruling that all discretion must always be exercised manually. Our proposed gate requires counsel and the service owner to map every material rule to its legal source and identify which judgments cannot be reduced to a fixed condition. Ambiguous law should be resolved through the appropriate legal process rather than silently converted into code. [1]
02
An official failure investigation points beyond model accuracy
The Robodebt Royal Commission recommended lawful end-to-end data exchanges, stronger data-matching governance, clear review paths, understandable information, scrutiny of rules, and possible independent monitoring. It also emphasized recipient-sensitive communication. These are findings and recommendations from a specific Australian inquiry, not proof that a single safeguard prevents all failures, and not a claim that every recommendation is now enacted. Their operational implication is to inspect the whole administrative chain: source records, legal interpretation, notices, collection activity, review, and management response. A correct calculation applied to an invalid premise can still produce an unlawful result. [2]
03
Risk assessment must be tied to deployment and change
Canada’s Directive on Automated Decision-Making requires a published algorithmic impact assessment before production and updates when scope or functionality changes. Its June 2025 revisions gave relevant existing systems until June 2026 to comply with updated requirements. The directive has a defined federal institutional and administrative-decision scope; it does not govern every Canadian automated system. This provides an administrative precedent for an explicit release gate. True Tomorrow proposes treating a material change in data, policy rules, decision threshold, or affected population as a new review event, with records that show who authorized the change. [3]
04
EU implementation dates require current, specific reading
The Commission reports that the AI Omnibus entered into force on 27 July 2026 and that the relevant Annex III high-risk rules will apply from 2 December 2027, with regulated-product high-risk rules following on 2 August 2028. The service desk’s reproduced Article 27 illustrates assessment of affected groups, likely rights harms, human oversight, and complaint arrangements for specified deployers. That reproduction explicitly uses the 2024 text and is a design reference here, not a claim of verified consolidated compliance. Existing data-protection and administrative obligations require their own analysis. A postponed AI-specific date does not, by itself, answer whether a present public decision is lawful. [4] [5]
05
Explanation must make the individual outcome intelligible
In its 2025 Dun & Bradstreet Austria judgment summary, the Court of Justice describes an explanation that lets a person understand how their data were used and challenge the decision. Merely providing an algorithm is insufficient, while disputed trade secrets may require assessment by the competent authority or court. This interpretation concerns GDPR access rights in a particular EU legal context; it is not an unlimited global entitlement to source code. The proposed operational test is whether a reviewer and affected person can identify the decisive inputs, applicable rule, material uncertainty, and route to correct an error. [6]
06
Unequal harm can originate outside the model
NIST’s work on AI bias explains that harmful bias can arise across technology processes, including without deliberate intent. The memo draws a practical inference: an evaluation should examine the service population and workflow as well as model outputs. Excluding incomplete applications can conceal the experience of people with unstable addresses, inaccessible forms, or missing records. Review should therefore track entry, abandonment, data completeness, referral, decision, and remedy. Subgroup measurement must be lawful and proportionate, and uncertain or missing demographic information must remain visible rather than being converted into a false claim of equal treatment. [7]
07
A technically accessible interface is only part of effective review
WCAG 2.2 supplies testable web-accessibility criteria, including accessible authentication, clear errors, and assistance-related requirements. It is a technical recommendation whose legal force depends on the applicable regime. Conformance can improve a digital route but does not establish that a person understood the decision or reached an empowered reviewer. Our proposal adds assisted, telephone, and in-person routes where needed, interpreters and representatives, and testing with users facing real access barriers. Review deadlines should account for urgency and the consequences of delay, with interim protection determined under the relevant law. [8]
Institutional Implications
What this changes in practice.
These are design implications drawn from the synthesis, not claims that one institutional model will fit every jurisdiction.
01
Maintain a rule-to-decision record
For each consequential decision, retain the applicable rule version, relevant input provenance, output, material staff intervention, notice, and review outcome under a justified retention schedule. A record should allow a lawful independent review without exposing unrelated personal information. The public authority must retain control of the evidence even when a vendor operates the system.
02
Give reviewers authority, time, and alternatives
Train reviewers on the actual policy and common system failures; permit them to obtain missing evidence and depart from a recommendation when justified. Record reasons and check a sample for automatic endorsement. Staffing plans should account for review demand and complex cases, with escalation where a reviewer lacks delegated authority.
03
Test harm against the service’s real alternative
Compare the proposed system with the existing process, including manual error, delay, exclusion, staff burden, and unequal treatment. Publish the comparator and uncertainty. A new system need not achieve impossible perfection, but a faster average decision is insufficient justification for a serious unmitigated rights failure.
04
Make one correction travel across the system
Distinguish an individual factual error from a defective rule, corrupted input feed, or unlawful practice. For systemic failures, identify potentially affected cases, stop further adverse decisions where warranted, arrange reconsideration, and correct downstream records. The authority should not require everyone to reproduce the same successful complaint.
05
Prepare a service-continuity decision
Define who can restrict or stop a system, which evidence triggers escalation, and how essential services continue. A complete shutdown can itself harm people waiting for benefits or care. Plan controlled manual processing, preserved records, and priority handling before deployment rather than improvising after an incident.
04 / Policy options
Choices and their tradeoffs.
Foundation analysis of the options. Evidence informs the choices; it does not remove their costs or uncertainty.
1Use automation for bounded support tasks
Original option: deploy assistance for document routing or identifying missing fields where staff can verify the result and an error does not automatically deny a right. This can free capacity, but support tools still influence outcomes. Monitor whether staff begin treating a suggestion as a mandatory rule. [1]
Require independent review before adverse action
Original option: for defined high-consequence decisions, require a competent reviewer to examine the relevant evidence before the decision takes effect. This adds workload and may introduce delay. Use urgency-based triage and adequate staffing, then evaluate actual reviewer behavior rather than counting signatures. [2]
Decline an unsuitable automated use
Original option: where authority, valid data, intelligible reasons, or feasible remedy cannot be established, redesign the service or retain a supported human process. Refusal should identify the unmet condition and what evidence could change the decision. It should not be portrayed as a finding that all automation in the sector is unacceptable. [3] [7]
05 / Implementation
From a proposal to a working system.
A proposed sequence for local adaptation. These stages are not a claim of funded or completed Foundation activity.
- 1
Specify the decision and legal pathway
Select a service and identify the legal decision-maker, affected people, adverse consequences, discretion, and available review powers. Build a rule map and inventory dependent data exchanges.
- 2
Test without changing entitlements
Use historical or appropriately governed test cases to evaluate legal-rule translation, missing records, unusual circumstances, staff interventions, and accessible notices. Document where retrospective data cannot establish correctness.
- 3
Authorize a bounded operational pilot
Assign release authority, publish a comprehensible system record, fund human review, and define continuity arrangements. Record explicit limits on population, decision type, data, and duration.
- 4
Review outcomes and repair failures
Audit representative cases, including people who never appeal. Investigate systemic patterns and publish protected findings. Expansion requires a new decision grounded in observed service outcomes and unresolved risks.
06 / Measurement
What progress would mean.
Proposed measures for evaluation. Baselines, thresholds and reporting responsibilities must be agreed before implementation.
- Decision correctness
Independent review of a defined sample against applicable law and verified facts, with reasons for disagreement.
Interpretation: Historic decisions and appeal outcomes are imperfect ground truth; report unresolved cases separately.
- Unequal error burden
False adverse decisions, missed entitlements, and delays by relevant groups where lawful and statistically interpretable.
Interpretation: Report denominators and uncertainty; parity of one metric does not prove non-discrimination.
- Effective review access
People able to obtain a reasoned review and timely action, including assisted channels and abandoned attempts.
Interpretation: A low appeal rate can reflect barriers; a high reversal rate can reflect selection or successful correction.
- Systemic repair completion
Affected cases identified, reconsidered, notified, and corrected after a shared defect is confirmed.
Interpretation: Track unresolved cases and downstream damage; closing an incident ticket does not establish remedy.
Source Record
Read the official sources.
-
[1]
Commonwealth Ombudsman, Office of the Australian Information Commissioner, and Attorney-General’s Department · March 2025 · Accessed 2026-09-23
Australian administrative guidance; particularly legal authority, discretion, rule mapping, and audit trails.
-
[2]
Royal Commission into the Robodebt Scheme · 7 July 2023; corrected edition 11 July 2023 · Accessed 2026-09-23
Official inquiry and recommendations, particularly chapters 10, 16–18; recommendations are not represented as current law.
-
[3]
Treasury Board of Canada Secretariat · Modified 24 June 2025 · Accessed 2026-09-23
Official indexed directive text inspected; direct page retrieval was rejected. Defined federal scope, impact assessment, and transition dates.
-
[4]
European Commission · 27 July 2026; updated 31 July 2026 · Accessed 2026-09-23
Primary institutional confirmation of entry into force and revised high-risk application dates; consolidated legal text was not directly retrievable.
-
[5]
European Commission AI Act Service Desk · 2024 text; accessed 23 September 2026 · Accessed 2026-09-23
The page identifies its text as the 13 June 2024 version. Used as a design reference with current-status caveat, not consolidated legal advice.
-
[6]
Court of Justice of the European Union · 27 February 2025 · Accessed 2026-09-23
Court-owned explanation of the ruling on meaningful information and trade-secret balancing under GDPR; the press release is not the judgment text.
-
[7]
National Institute of Standards and Technology · 15 March 2022 · Accessed 2026-09-23
Technical and conceptual discussion of bias across AI processes; not a causal evaluation of the proposed safeguards.
-
[8]
World Wide Web Consortium · Recommendation 12 December 2024 · Accessed 2026-09-23
Technical accessibility standard; conformance and applicable legal duties must be assessed separately.
Suggested citation: True Tomorrow Foundation (2026). Rights Protections in Automated Public Systems. Policy Memo. Reviewed September 23, 2026.
