Radical rewriting of Article 22 GDPR on machine decisions in the AI era