³ÉÈËÓ°Òô

In brief

Data protection law in the UK seeks to ensure information about living individuals (within the definition of ‘Personal data’) is used fairly and responsibly. To help ensure that, UK data protection law imposes a large number of obligations on those ‘processing’ personal data (and on the controllers of such processing).

Key protections under UK data protection law include restrictions on automated individual decision-making (in summary, decision making by automated means, with UK data protection law imposing significant additional protections for data subjects where the decision making occurs in the absence of any meaningful human intervention) and Profiling (in summary, automated processing of personal data to evaluate things about a person (which may or may not feature human intervention)).

This Practice Note provides guidance on profiling and automated decision-making and sets out how these are regulated under data protection law in the UK, including consideration of solely automated decision-making. It explains the concepts of profiling and automated decision-making, including solely automated decision-making, and sets out how to lawfully undertake processing of this sort, including