# Automated individual decision-making, including profiling 22(4) — GDPR — provision context

> Focused context for a single provision (22(4)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-22#par-4
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Automated individual decision-making, including profiling** (GDPR, full article: https://overview.legal/laws/gdpr/art-22).

## Provision text

### 22(4)

Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in Article 9(1), unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard the data subject's rights and freedoms and legitimate interests are in place.


## Topics on this provision

- **Special Categories of Data** — https://overview.legal/topics/bijzondere-persoonsgegevens
  Sensitive data requiring enhanced protection (health, biometric, etc.)
- **Lawful Basis** — https://overview.legal/topics/lawful-basis-article-6
  This topic is essential as Article 6 GDPR provides the specific legal bases that determine whether processing is lawful, which is the core requirement of the 'L
- **Legitimate Interest** — https://overview.legal/topics/gerechtvaardigd-belang
  Processing necessary for legitimate interests pursued by controller or third party
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons

## Cited by (exact-provision citations)

- **Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s** (case-law) — https://overview.legal/posts/132279
- **Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s** ¶68 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132279
- **Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s** ¶55 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132279
- **Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR** (guidance) — https://overview.legal/posts/38139
- **‘Leading by Science’ through Covid-19: the GDPR Automated Decision-Making** (literature) — https://overview.legal/posts/132597
- **General Data Protection Regulation (GDPR) – Revolution Coming to European Data Protection Laws in 2018. What’s New for Ordinary Citizens?** (literature) — https://overview.legal/posts/132416

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-22#par-4 · 2026-08-22