EDPB Guidelines on ADM and profiling

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

The document provides an overview of profiling and automated decision-making regulation under the GDPR. Specific provisions on solely automated decision-making as defined in Article 22, exceptions to the prohibition, and the rights of the data subject concerning automated decision-making are detailed. The document also discusses the implications for children, the role of Data Protection Impact Assessments (DPIA), and Data Protection Officers (DPO). It concludes with good practice recommendations, key GDPR provisions related to profiling and automated decision-making, and further reading materials.