Competition Law and Strategic Infrastructure Competition Governance

1. Introduction

A Decision Support System (DSS) is a computer-based system that helps a person or organisation make decisions. It collects data, analyses information, identifies risks, gives recommendations and may suggest possible actions. In the energy sector, DSS can help system operators decide about electricity demand, grid congestion, renewable-energy integration, outages, storage, pricing and emergency response.

A DSS normally supports a human decision-maker rather than replacing that person. This distinction is legally important. Where a computer only provides advice and a human genuinely considers that advice, the legal position is different from a system that automatically makes a decision affecting a person's rights.

2. Meaning of a Legal Framework for DSS

A DSS legal framework means the collection of laws, regulations and principles that control:

What data the system can use

How data is collected and processed

How automated recommendations are produced

Who is responsible for the final decision

How decisions can be explained or challenged

How discrimination and unfair outcomes are prevented

How cybersecurity and system reliability are maintained

How regulators can audit the system

Therefore, a DSS should not be treated only as a technical tool. It can create important legal consequences when its recommendations influence regulatory, commercial or consumer decisions.

3. Data Protection and Privacy

Data protection is one of the most important parts of a DSS framework. A system may process consumer information such as electricity consumption, smart-meter data, location information or payment history.

Under UK data-protection law, organisations must consider lawfulness, fairness, transparency, data minimisation, accuracy, security and accountability when personal data is processed. The ICO also states that AI-assisted decision-making involving personal data remains subject to data-protection principles even where a human is involved. (ICO)

For high-risk automated processing, a Data Protection Impact Assessment (DPIA) may be required before the system is deployed. (ICO)

4. Human Oversight

A central legal principle is meaningful human oversight.

If an energy DSS recommends that a particular consumer should have restricted supply, a regulator or utility should not simply accept the recommendation without proper examination.

The human decision-maker should have:

sufficient knowledge of the system;

access to relevant information;

authority to reject the recommendation;

ability to identify errors;

responsibility for the final decision.

The ICO specifically distinguishes decision-support from solely automated decision-making and states that human involvement must be meaningful rather than merely a “rubber stamp.” (ICO)

5. Transparency and Explainability

A DSS should be capable of explaining why a recommendation was produced.

For example, if a system recommends reducing electricity demand in a particular area, the operator should be able to understand whether the recommendation resulted from:

network congestion;

demand forecasts;

equipment failure;

renewable generation levels; or

security requirements.

Transparency is particularly important where a DSS affects consumers or other legally protected interests. UK data-protection guidance recognises rights concerning information about automated decision-making and the logic involved. (ICO)

6. Fairness and Non-Discrimination

DSS can create unfair outcomes if the underlying data is inaccurate or biased.

For example, a system used for energy-credit decisions might produce systematically different outcomes for different groups because historical data contains hidden discrimination.

The legal framework therefore requires attention to accuracy, fairness and discrimination risks. The ICO guidance emphasises measures to reduce errors, bias and discriminatory effects in automated decision-making. (ICO)

7. Cybersecurity and Reliability

Energy DSS systems may form part of critical infrastructure. Therefore, cybersecurity is essential.

A legal framework should require:

secure access controls;

protection against unauthorised changes;

audit logs;

incident-response procedures;

regular testing;

backup arrangements;

monitoring of system performance.

If incorrect or manipulated information causes a major grid decision, questions of regulatory responsibility and negligence may arise.

8. Important Case Laws

R (Bridges) v Chief Constable of South Wales Police [2019] EWHC 2341 (Admin)

This case concerned the police use of Automated Facial Recognition technology. The court considered issues including legal authority, proportionality and safeguards surrounding algorithmic technology. It demonstrates that the use of automated systems by public authorities must remain within legal powers and appropriate safeguards. (Bailii)

R (Bridges) v South Wales Police [2020] EWCA Civ 1058

The Court of Appeal continued the examination of automated facial recognition and found that the police had not adequately addressed important legal requirements concerning the system's operation. The case is relevant to DSS because it shows that using technology does not remove ordinary public-law duties.

State v Loomis, 881 N.W.2d 749 (Wis. 2016)

The case involved the use of the COMPAS algorithm in criminal sentencing. The court allowed its use but recognised concerns surrounding proprietary algorithms, accuracy and the ability of decision-makers to understand the system's limitations. It is frequently discussed in the wider debate about algorithmic decision support and due process.

9. Administrative Law and Accountability

Where a DSS is used by a public authority, ordinary administrative-law principles continue to apply.

A decision should therefore be:

authorised by law;

procedurally fair;

rational and reasonable;

based on relevant information;

open to appropriate review.

The authority cannot simply argue that “the computer recommended it.” The legal responsibility normally remains with the institution or official making the decision.

10. Conclusion

The legal framework for Decision Support Systems is based on a combination of data protection, administrative law, equality principles, cybersecurity, transparency, accountability and human oversight.

For energy systems, the most important principle is that DSS should assist responsible decision-making rather than hide responsibility behind technology. A legally sound DSS should therefore have reliable data, documented decision processes, meaningful human review, cybersecurity controls, explainable recommendations and effective mechanisms for challenge and review.

In this way, technology can improve energy-system management while maintaining legality, fairness, accountability and protection of individual rights.