Thursday, September 14, 2017

GDPR Profiling, Automated Processing and Artificial Intelligence

The GDPR definition of profiling and automated processing may be interpreted to include artificial intelligence.  "‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements; .. [GDPR Article 4, paragraph (4)]

Where, "...the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. [GDPR Article 13, paragraph (2f)]

And in some instances, an individual can ask that their information be processed by a human, "...the right to obtain human intervention.." [GDPR Article 22].