Translations:Synthèse du règlement sur la protection des données/7/en

This proposed regulation would sanction 'profiling'. Profiling is defined in the text as “any form of automated processing of personal data intended to evaluate certain personal aspects relating to a natural person or to analyse or predict in particular that natural person’s performance at work, economic situation, location, health, personal preferences, reliability or behaviour” (Article 4(3a)).

Profiling of individuals exacerbates the power imbalance between states and corporations on one hand and the individual user on the other. In the case of a private enterprise, data can be used in order to deduce consumer habits in order to more effectively target advertisements or decide on the terms and conditions of a bank loan. Profiling is also of interest to governments' security efforts. The surveillance of a person or group of persons can be done through the collection of their data to study their habits, movements, activities and international contacts. (See amongst other, Article 20) The text prohibits profiling that “has the effect of discriminating against individuals on the basis of race or ethnic origin, political opinions, religion or beliefs, trade union membership, sexual orientation or gender identity” and requests that the controller act to prevent discrimination. (Article 20(3)).