Data Privacy and Automated Decision Making
An activity constitutes profiling if three elements are met. Modern data privacy statutes do not per se prohibit companies from using profiling to make decisions. Most privacy statutes give individuals the right to opt out of being subjected to the automated decision.
Source: natlawreview.com