Compliance Glossary

Data mining or ‘profiling’ is an automated process that analyzes, processes, and makes decisions based on specific aspects of a data subject. Under the GDPR, it is imperative that data processors and controllers inform data subjects on the existence of such processes, logic, and decision-making instruments. If these decisions are made as per a contract between the controller or processor and data subject, the former will have to take sufficient measures to ensure that the rights of the data subject are preserved. The data subject has the right to obtain more information, express their point of view, and contest automated decisions.