Study
Study at UCL
Being a student at UCL is about so much more than just acquiring knowledge. Studying here gives you the opportunity to realise your potential as an individual, and the skills and tools to thrive.
Research
Research at UCL
Find out more about what makes UCL research world-leading, how to access UCL expertise, and teams in the Office of the Vice-Provost (Research, Innovation and Global Engagement).
Engage
Engage with UCL
Discover the many ways you can connect with UCL, and how we work with industry, government and not-for-profit organisations to tackle tough challenges.
About
About UCL
Founded in 1826 in the heart of London, UCL is London's leading multidisciplinary university, with more than 16,000 staff and 50,000 students from 150 different countries.

Is That Your Final Decision? Multi-Stage Profiling, Selective Effects, and Article 22 of the GDPR

By Dr Reuben Binns (Associate Professor, Department of Computer Science at the University of Oxford) and Dr Michael Veale (Associate Professor, UCL Laws)

Publication details

Binns, Reuben and Veale, Michael. (2021) 'Is that your final decision? Multi-stage profiling, selective effects, and Article 22 of the GDPR', International Data Privacy Law, Volume 11, Issue 4, November 2021, Pages 319–332, https://doi.org/10.1093/idpl/ipab020

Summary

Provisions in many data protection laws require a legal basis, or at the very least safeguards, for significant, solely automated decisions; Article 22 of the GDPR is the most notable.
Little attention has been paid to Article 22 in light of decision-making processes with multiple stages, potentially both manual and automated, and which together might impact upon decision subjects in different ways.
Using stylised examples grounded in real-world systems, we raise five distinct complications relating to interpreting Article 22 in the context of such multi-stage profiling systems.