Information Commissioner's Office
Profiling under the GDPR: feedback request
Blog posted by: Jo Pedder, Interim Head of Policy and Engagement, 06 April 2016.
Imagine a friend tells you about a holiday deal. You go online to book the same deal but you cannot see it on the website. Unbeknown to you, behind the scenes an algorithm has analysed where you live, your age, gender, occupation, online activity and more and decided you wouldn’t be interested.
This is called profiling.
Today we published our initial thoughts on this topic under the GDPR, which introduces stricter provisions to protect individuals from this type of data processing.
Profiling can be a powerful tool for organisations and can benefit individuals, the economy and society generally. It can help organisations to understand and target audiences more effectively and is used to make decisions about people, but these can have a significant and sometimes detrimental effect on individuals.
People also often don’t know they are being profiled and therefore have no understanding of how their personal data is being used.
The discussion paper published today highlights the key areas of profiling we feel need further consideration. This includes subjects like marketing, the right to object and data minimisation – and we want your feedback. We’d like to hear the views of our stakeholders and get examples of best practice before 28 April 2017.
We’re taking a leading role on this issue as part of the Article 29 Working Party – the group that brings together EU data protection regulators. The Article 29 Working Party guidelines on profiling are due to be published later this year and we will use your feedback to inform that work.
You can find regular updates on the progress via our data protection reform webpages.
Jo Pedder is Interim Head of Policy and Engagement. She has lead responsibility for the ICO’s guidance on the Data Protection Act and the Freedom of Information Act.
Latest News from
Information Commissioner's Office
Blog: Data protection doesn’t take a day off13/05/2019 15:20:00
Last year we began taking action against organisations for non-payment of the data protection fee, sending out a clear message that those who didn’t pay risked a fine.
Blog: Using biometric data in a fair, transparent and accountable manner13/05/2019 12:25:00
As technology takes ever greater strides, so organisations and businesses are harnessing its capabilities to help manage their contact with customers, including using it for means of identification and authentication.
Helping people be data aware09/05/2019 16:28:00
In our data-driven world, it’s more important than ever to know who is using people’s personal data, and why.
Blog: ICO regulatory sandbox09/05/2019 09:10:00
Please get in touch with any Sandbox queries as deadline for applications approaches.
ICO fines PPI claims company £120,000 for millions of nuisance texts08/05/2019 12:25:00
The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.
ICO says that voice data collected unlawfully by HMRC should be deleted07/05/2019 15:25:00
An ICO investigation into HMRC’s Voice ID service was prompted by a complaint from Big Brother Watch about the department’s conduct. The investigation focused on the use of voice authentication for customer verification on some of HMRC’s helplines since January 2017.
Blog: Helping us strike the right balance between journalism and data protection29/04/2019 15:20:00
Privacy and freedom of expression are both fundamental rights that are equally vital to our society, democracy and way of life.
ICO fines funeral plan firm and asks public to help elderly relatives to report nuisance calls17/04/2019 09:10:00
The Information Commissioner’s Office (ICO) wants people to support their elderly relatives or neighbours if they are receiving nuisance marketing calls.