On 27 February 2025, the Court of Justice of the European Union delivered its judgment in Case C-203/22 concerning the right to obtain information about decisions based solely on automated data processing. The Court held that Article 15(1)(h) of the GDPR grants data subjects the right to receive explanations regarding the principles and procedures of automated data processing that led to a specific decision. At the same time, the CJEU emphasised that controllers cannot arbitrarily refuse to fulfil this right on the grounds of protecting trade secrets; any potential limitations must result from an individual balancing of interests conducted by a supervisory authority or a court. The purpose of this article is to analyse the Court’s reasoning, to discuss how controllers can meet requests for explanations regarding automated decision-making in light of the standards set by the judgment, and to assess the impact of the Court’s interpretation on the application of the right to explanations under Article 86 of the AI Act.