Automated decision making, profiling and Online tracking

Automated decision-making involves decisions taken by a computer system without human input. Profiling is the automated analysis of personal data to assess personal aspects relating to an individual, such as their behaviour, preferences, interests, economic situation. Online tracking collects data across websites and apps, such as visits and clicks, to monitor users’ activities.
This can raise privacy concerns, when it affects people's lives, such as being automatically rejected for a loan or job. The EDPB provides guidance to help organisations use these methods responsibly.

Guidance

Guidelines 8/2020 on the targeting of social media users

Guideline
#Basic principles #Legal basis #Technology #Automated decision making, profiling and Online tracking #Online platforms
Read more about
Guidelines 8/2020 on the targeting of social media users

Statement 2/2019 on the use of personal data in the course of political campaigns

Statement
#Automated decision making, profiling and Online tracking #Elections
Read more about
Statement 2/2019 on the use of personal data in the course of political campaigns

Policy work

EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)

Legislative opinion
#Artificial intelligence #Automated decision making, profiling and Online tracking #Controller/processor #Cross-regulatory interplay #Legal basis
Read more about
EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)

Enforcement support

Report of the work undertaken by the Cookie Banner Taskforce

Task force report
#GDPR enforcement #Cooperation between authorities #Automated decision making, profiling and Online tracking
Read more about
Report of the work undertaken by the Cookie Banner Taskforce

Internal procedure

Internal EDPB Document 04/2021 on criteria of territorial competence of supervisory authorities to enforce Article 5(3) of the ePrivacy Directive

Internal document
#Cooperation between authorities #Automated decision making, profiling and Online tracking #Cross-regulatory interplay
Read more about
Internal EDPB Document 04/2021 on criteria of territorial competence of supervisory authorities to enforce Article 5(3) of the ePrivacy Directive

Mandate on geolocation and other tracing tools in the context of the COVID-19 outbreak

Internal procedural guidance
#Technology #Automated decision making, profiling and Online tracking #Health and research
Read more about
Mandate on geolocation and other tracing tools in the context of the COVID-19 outbreak