On 6 April 2017 the ICO published a feedback request on profiling and automated decision-making under the GDPR, requesting feedback and comments on the new provisions in the Regulation. Stakeholders have identified profiling as an area of concern and WP29 has prioritised this as a topic for future guidance.

GDPR provisions focus on profiling that has a "significant" effect on individuals, rather than profiling that has little or no impact, with the aim of greater accountability.

Organisations should keep a watching brief on any feedback or guidance published on profiling

A copy of the ICO feedback request can be accessed here.