Profiling
What is Profiling?
Any form of automated processing of personal data that evaluates certain personal aspects relating to a natural person, particularly to analyse or predict aspects concerning that person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
Terms that appear alongside profiling
Each of these is named in at least one of the same controls as profiling. The number is how many controls name both.
- consent 68 shared controls
- data protection 49 shared controls
- gdpr 47 shared controls
- data subject 43 shared controls
- automated decision making 36 shared controls
- data subject rights 26 shared controls
- audit 25 shared controls
- transparency 21 shared controls
Frameworks that govern profiling
What the standards actually require on profiling
Requirements naming profiling across 6 standards, quoted from the control text.
Decisions based solely on automated processing, including profiling, that produce an adverse legal effect or significantly affect the data subject are prohibited unless provided by law with appropriate safeguards and at least the right to human intervention by...
albania-law-no-124-2024-on-personal-data-protection::53 · Article 53: automated decisions and discriminatory profiling in law enforcement →Standard 6 per Sections 37-43 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in accordance with the rights of data subjects under this Act.
JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction · Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Decision-Making Restrictions + Profiling + Restriction Right →Data subjects may object where third parties' rights are not affected, the law allows it and the data are not public, of public interest or processing ordered by law;
ley-org-nica-de-protecci-n-de-datos-personales-lopdp::16 · Art. 16: objection, including to direct marketing and profiling, within 15 days →A controller must not process a consumer's personal data for targeted advertising, sale or significant-effect profiling without consent where it has actual knowledge, or wilfully disregards, that the consumer is at least 13 and younger than 17 (paragraph (7) b...
new-jersey-data-privacy-act::56:8-166.12(a)(8) · Consent for targeted advertising, sale or significant profiling of teens aged 13 to 16 →A consumer may opt out of processing for targeted advertising, for the sale of personal data (subject to the loyalty programme rule), or for profiling in furtherance of automated decisions producing legal or similarly significant effects.
vermont-data-privacy-and-online-surveillance-act::2415d-a5 · 9 V.S.A. § 2415d(a)(5) Right to opt out of targeted advertising, sale and significant automated profiling →The data subject may object to decisions resulting from automated processing, including profiling, especially those with legal effect or adverse effect on them, unless the automated processing is agreed in their contract with the controller, required by other...
federal-decree-law-no-45-of-2021-on-the-protection-of-personal-data-uae-pdpl::18 · Article 18: automated decisions, including profiling →Questions people ask about profiling
What is Profiling?
Why is Profiling important for compliance?
Which compliance frameworks address Profiling?
Where can I learn more about Profiling?
See how Profiling applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.