WP29 Updates Guidelines on Automated Individual Decision-Making and Profiling for GDPR

The WP 29 has issued the updated guidelines dated 6 February. The General Data Protection Regulation specifically addresses profiling and automated individual decision-making, including profiling. These processes can be opaque and individuals might not know that they are being profiled or understand what is involved. Profiling and automated decision-making can pose significant risks for individuals’ rights and freedoms which require appropriate safeguards. WP251 rev1 provides updated guidance including examples for compliance with the requirements.