Comment by GeekyBear

I believe the GDPR requires that companies be able to explain the decisions of black box algorithms when they have the potential to cause harm personally or financially.