An automated decision is made without significant human intervention and produces legal effects or significantly affects the person, such as a credit refusal. The GDPR regulates it: in principle, the person can request human intervention, express their point of view and contest the decision.
Example
Automatic rejection of an application by a screening algorithm.