In this document, the WP29 draws attention to (amongst other topics) (i) the definitions of profiling and automated decision-making, (ii) the specific regulation regarding automated decision-making and profiling, (iii) the relation of these subjects with children and (iv) these subjects in relation with the performance of a data protection impact assessment.

WP29 also notes that on the basis of article 22 of the GDPR, Member States can introduce legislation to restrict data subjects’ rights and data controllers’ obligations regarding profiling and automated decision-making.