Automated Decision-Making & Profiling under UK GDPR

Wishlist Share

About Course

The Data (Use and Access) Act 2025 rewrote the UK GDPR rules on solely automated decisions. This course explains what counts as a significant, solely automated decision, the new Articles 22A to 22D, the safeguards you must provide, the stricter rules for special category data, and the ICO’s expectations for areas such as recruitment.

Tutwoo is an independent learning provider. This course is general guidance and is not legal advice. ICO guidance on automated decision-making was being updated in 2026.

What Will You Learn?

  • Recognise when a decision is solely automated and significant
  • Understand what changed on 5 February 2026
  • Put the four required safeguards in place
  • Reduce the risk of unfair or biased automated outcomes

Course Content

Course Lessons

  • Key terms: profiling, automated and significant
  • What changed under the Data (Use and Access) Act 2025
  • The four safeguards and good practice

Sources & Further Reading
The official guidance this course is based on.

Final Assessment

Student Ratings & Reviews

No Review Yet
No Review Yet

Want to receive push notifications for all major on-site activities?

✕