Profiling
What is Profiling?
Any form of automated processing of personal data that evaluates certain personal aspects relating to a natural person, particularly to analyse or predict aspects concerning that person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
Terms that appear alongside profiling
Each of these is named in at least one of the same controls as profiling. The number is how many controls name both.
- consent 68 shared controls
- data protection 49 shared controls
- gdpr 47 shared controls
- data subject 43 shared controls
- automated decision making 36 shared controls
- data subject rights 26 shared controls
- audit 25 shared controls
- transparency 21 shared controls
Frameworks that govern profiling
What the standards actually require on profiling
Requirements naming profiling across 6 standards, quoted from the control text.
Standard 6 per Sections 37-43 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in accordance with the rights of data subjects under this Act.
JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction · Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Decision-Making Restrictions + Profiling + Restriction Right →Do not subject a data subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a cont...
GDPR-Art.22 · Automated individual decision-making, including profiling →Section 4(3) of Kentucky CDPA establishes the Universal Opt-Out Mechanism (UOOM) requirement + reflects converging US state privacy law standards for browser-level opt-out signals.
KY-CDPA-Universal-Opt-Out-Mechanism-Recognized-Browser-Level-GPC-Global-Privacy-Control · Kentucky CDPA Universal Opt-Out Mechanism + Section 3 + Section 4 + Recognized + Browser-Level + GPC Global Privacy Control + UOOM + Honored for Targeted Advertising + Sale + Profiling + Annual List of Recognized Mechanisms →Profiling that produces legal or similarly significant effects must be assessed, monitored, and accompanied by safeguards including consumer transparency and opt out.
TIPA-12 · Profiling with Significant Effects →Profiling in furtherance of decisions that produce legal or similarly significant effects (e.g., financial, housing, employment, healthcare, insurance, education) triggers opt-out rights and mandatory DPIA.
TDPSA-541-101-PROFILING · Profiling Producing Legal or Significant Effects →Provide consumer opt-out rights for: (a) processing personal data for targeted advertising, (b) sale of personal data (defined more narrowly than CCPA - exchange of personal data for monetary consideration), (c) profiling in furtherance of decisions that produ...
NDPA-3 · Opt-Out Rights for Targeted Advertising, Sale, and Profiling →Questions people ask about profiling
What is Profiling?
Why is Profiling important for compliance?
Which compliance frameworks address Profiling?
Where can I learn more about Profiling?
See how Profiling applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.