Start Submission Become a Reviewer

Reading: Data is power: Towards additional guidance on profiling and automated decision-making in the...

Download

A- A+
Alt. Display

Articles

Data is power: Towards additional guidance on profiling and automated decision-making in the GDPR

Authors:

Frederike Kaltheuner ,

Privacy International, GB
About Frederike
Programme Lead and Policy Officer
X close

Elettra Bietti

Harvard Law, US
About Elettra
PhD student
X close

Abstract

In contrast to automated decision-making, profiling is a relatively novel concept in European data protection law. It is now explicitly defined in Article 4(4) of the EU General Data Protection Regulation (GDPR), and refers to the automated processing of data (personal and not) to derive, infer, predict or evaluate information about an individual (or group), in particular to analyse or predict an individual’s identity, their attributes, interests or behaviour.
Through profiling, highly sensitive details can be inferred or predicted from seemingly uninteresting data, leading to detailed and comprehensive profiles that may or may not be accurate or fair. Increasingly, profiles are being used to make or inform consequential decisions, from credit scoring, to hiring, policing and national security.
Ever since the approval of the regulation in 2016, debates have focussed on the GDPR’s potential to limit or offer protection against increasingly sophisticated means of processing data, in particular with regard to profiling and automated decision-making. While the GDPR offers new rights and protection, their scope and limits are open to debate, partly due to the clumsy syntax of the relevant articles and the lack of authoritative guidance concerning their interpretation.
The European Data Protection Board that will replace the Working Party on the Protection of Individuals with regard to the Processing of Personal Data is specifically tasked with publishing ‘guidelines, recommendations and best practices’ on the GDPR. In October 2017, the Working Party 29 has published draft guidance on profiling and automated decisionmaking.
In this article we propose our suggestions to contribute to the development of guidelines which provide the strongest protections for data subjects.
How to Cite: Kaltheuner, F. and Bietti, E., 2018. Data is power: Towards additional guidance on profiling and automated decision-making in the GDPR. Journal of Information Rights, Policy and Practice, 2(2), p.None. DOI: http://doi.org/10.21039/irpandp.v2i2.45
Published on 14 Mar 2018.
Peer Reviewed

Downloads

  • PDF (EN)

    comments powered by Disqus