The WP29 published its guidelines on automated individual decision-making and profiling for the purposes of Regulation 2016/679.

Il differentiated between “profiling”, “decision-making based on profiling” and “solely automated decision-making”. 

According to WP 29, even though these notions are often related, they should not be confused.

For the WP 29, only the third category may be subject to the provisions of Article 22 of the GDPR, while the first two categories are subject to the “general” legal regime for personal data protection.

It also addressed the issue of targeted online advertising, which could in some cases be subject to this article.