Automated Decision Making in Financial Services: Striking a Balance Between Innovation and Financial Inclusion

The use of automated decision banking systems, while enhancing efficiency, presents a critical legal and regulatory dilemma. Financial institutions' growing reliance on automatic decision making using both traditional financial data and novel forms of alternative data creates a tension between technological innovation and the protection of the consumer's personal information within the ambit of the Protection of Personal Information Act 4 of 2013 (POPIA). This contribution undertakes a comparative analysis between the regulatory framework governing automatic decision making (ADM) in the POPIA and the European Union's General Data Protection Regulation (GDPR) within the context of financial inclusion. The analysis reveals that POPIA's current framework may be ill-equipped to mitigate the risks inherent in automated decision making within the banking sector. The Act's core concepts "significant effect", "legal consequence" and "appropriate measures" are critically undefined, and the under-specified standards for "meaningful explanation" and "human intervention" generate legal uncertainty leading to inconsistent application and insufficient consumer safeguards. This regulatory ambiguity risks perpetuating unfair outcomes, eroding consumer trust and fostering financial exclusion through opaque algorithmic processes that applicants cannot effectively understand or contest. Comparatively, the GDPR's more articulated framework for safeguards and explanations highlights a pathway for reform. As such, there is a need for regulatory and authoritative guidance of the scope of application of ADM within the credit context. Furthermore, there is a need for clear standards for meaningful human intervention in automated credit decision-making processes. A balanced approach that enables innovation while upholding consumer rights, transparency and financial inclusion may be appropriate. Finally, it calls for the development of a sector-specific code of conduct for the banking industry to govern the ethical use of alternative data and algorithmic profiling, promoting transparency and accountability.