A Practice Note discussing the requirements for automated decision-making and profiling under the EU General Data Protection Regulation (GDPR), including general provisions applicable to profiling and automated decision-making and exceptions to the prohibition on certain automated decision-making. It also addresses data subjects' rights, targeted advertising, processing special categories of data, and safeguards for automated decision-making.