The U.K. Information Commissioner’s Office published guidelines for entities using automated profiling tools, as defined by the U.K. General Data Protection Regulation, in trust and safety processes. The guidance features frequently asked questions on topics, including how to demonstrate compliance with data protection law and data minimization requirements, and explains how recommendations can be applied to Online Safety Act compliance practices. The ICO noted the guidance is under review and may change as certain elements of the Data (Use and Access) Act enter into force. Editor’s note: Members of Bird & Bird’s International Privacy and Data Protection Group analyzed the major components of the DUA.
Full story