The ICO has published a discussion paper on the use of profiling, which sets out the key areas of data processing that it feels require further consideration, and invites stakeholders to feed back on these issues before 28 April 2017. The ICO explains that profiling entails the analysis of an individual’s or group of individuals’ behaviour, interests and habits often for the purpose of marketing. The ICO notes that profiling is sometimes carried out without an individual’s knowledge and organisations often retain and process more data than is strictly necessary to meet the specified purpose. The ICO also reminds organisations to ensure that they are reliant on a legitimate legal basis for the purpose of carrying out profiling activities. The feedback that the ICO gathers in response to the discussion paper will be used to influence the Article 29 Working Party’s guidelines on profiling in the context of the GDPR, which are due to be published later this year.