The CJEU's recent ruling emphasizes the GDPR's demand for algorithmic transparency in automated decisions, challenging companies to explain their logic. The decision also shows the difficulty of balancing such transparency with trade secret protection.