Businesses must provide very clear guidance to consumers on what profiling activities are being undertaken to ensure that they are exercising clear transparency onward to the data subjects. The data subjects must be kept aware of what profiling is being undertaken and for what purpose.
It also means that marketing agencies processing consumer data on behalf of a business need to be able to prove the data processing they have undertaken is what has been communicated to the consumer. This course will take you through the processes you need to undertake to ensure you are compliant.
Data Sources that we will discuss:
GDPR Articles the course focuses on:
- Internet and browsing history
- Data derived from existing customer relationships
- Buying habits
- Social network information.
Article 4(4):‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Article 22(1): The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.