Profiling is any type of automated processing of personal data in order to evaluate certain personal aspects of a natural person.
High-risk profiling occurs when personal data is processed automatically and a combination of data makes it possible to assess key aspects of personality.
In the case of high-risk profiling (when data is combined in such a way that significant aspects of a natural person’s personality can be assessed), the necessary consent must be given explicitly. These aspects are in turn listed under “profiling”: Work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location (Article 5, paragraphs f and g FADP).