Article 29 Working Party just published its Guidelines on Automated individual decision-making and Profiling under the EU General Data Protection Regulation. These guidelines are meant to provide clarification in relation to what is permitted in these areas under the GDPR.
The document covers:
- Definitions of profiling and automated decision-making and the GDPR approach to these in general
- Specific provisions on automated decision-making as defined in Article 22
- General provisions on profiling and automated decision-making
- Children and profiling
- Data protection impact assessments
Read the guidance document here:
http://ec.europa.eu/newsroom/document.cfm?doc_id=47742&t=1&cn=ZmxleGlibGV