Profiling
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Profiling - Automated processing to evaluate, analyse or predict personal aspects of a person - e.g. via cookies, web beacons or digital fingerprinting.
In the CIPP/E body of knowledge, Profiling comes up under Ch 16.2 - OBA and the GDPR; Ch 9.11 - Automated decisions & profiling; IAPP Training · Module 5 - BoK II.C.
Profiling in context
- For ==direct marketing== (now expressly including profiling) the right is absolute and must be flagged separately at the latest at first communication. (Right to object)
- First-party OBA is run by the publisher itself; the trickier case is ==third-party ad networks== that track users across many unaffiliated sites using [[cookies]] with unique identifiers and behavioural [[profiling]]. (Online behavioural advertising (OBA))
- Transparency: 'advertising' alone is not enough - users must be told what profiling happens. (Social media: roles, joint controllership, transparency)
Where Profiling is covered in the CIPP/E study notes
- Right not to be subject to solely automated decision-making
- Online behavioural advertising (OBA)
- Module 5 · Automated decision-making and profiling (Article 22)
Related terms
- Article 22
- Suitable safeguards
- OBA
- Cookie
- Joint controllers
- Single out
- Solely automated
Test yourself on Profiling
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.