Changes to Article 22 seem worth following fairly closely. As I understand it, the original EU GDPR Article 22[1] disallows the use of solely automated data pr

Changes to Article 22 seem worth following fairly closely. As I understand it, the original EU GDPR Article 22[1] disallows the use of solely automated data processes that have a legal or significant effect on individuals. The Digital Marketing Association has a publication to educate marketers about the EU GDPR, and mentions[2] significant effects in the context of online marketing. It explains, for example, that in a situation which borders on exploitation, an individual in debt could be provided with automated advertising about high-interest loans, leading them further towards financial and personal distress. That's an example of a case where no legal effect is necessarily felt; I'm sure there are potential situations in which automated legal decisions would have an even more significant impact. No doubt there is ambiguity in article 22 but I think that the UK Government, TIGRR and others involved should be careful not to open dangerous avenues while in the pursuit of (no-doubt well-meaning) scientific research angles. [1] - https://gdpr.eu/article-22-automated-individual-decision-making/ https://gdpr.eu/article-22-automated-individual-decision-mak... [2] - https://dma.org.uk/uploads/misc/5b322a16cc6a6-gdpr-for-marketers---profiling-_5b322a16cc5e3.pdf#page=10 https://dma.org.uk/uploads/misc/5b322a16cc6a6-gdpr-for-marke...