Automated Decision-Making and Profiling

[hlflanagan]

Article:
Impact of GDPR on IAM
"It’s beyond the scope of this article to explore this area in any depth; the GDPR, however, imposes quite stringent requirements in the case of Automated Decision-Making and Profiling. "

The requirements are largely the same + additional rights of individuals to opt out of/object to ADS, the right to human intervention, and the explainability requirements.

https://bok.idpro.org/article/id/24/

[hlflanagan]

Getting into detail gets complicated very quickly and it’s hard to generalise any recommendations at this stage; consider adding to a future version of the doc.