General Data Protection Regulation - ICO feedback request on profiling and automated decision-making

On 7 March 2017, IPA members were informed of the Information Commissioner’s Office (ICO) consultation on its draft guidance on consent under the General Data Protection Regulation (GDPR) to which the IPA responded.

View the response here. 

The ICO have now published a request for feedback on the new profiling provisions in the GDPR, and have specifically referred to its use in marketing/advertising.

The deadline for responses is 28 April.

The feedback request is not a consultation: it contains the ICO’s interpretation of the profiling provisions of the GDPR, and a set of 10 questions for organisations to answer to help the ICO better understand how profiling is used.

Whilst the IPA would be happy to respond to the feedback request, we will need assistance from members to answer the questions which are aimed at businesses and how they use profiling. If you would like to contribute, please either do so directly, or email Richard Lindsay, IPA Director of Legal & Public Affairs –

As noted previously, the ICO has general guidance notes on the GDPR which members may find useful. These are available via the Data Protection Reform area of the ICO’s website and include an Overview of the GDPR. The IPA has also produced various notes for members on data protection, including a Beginners Guide to Data Protection and Data Protection for Advertising

Last updated 21 January 2022