New rules governing the use of automated decision-making software arrive after more than a year of drafting and debate.