Simplified Profiling can be defined as a automated processing that based on aspects of an individual’s characteristics can make predictions and decisions about this individual.
Profiling is defined in Art. 4(4) GDPR as: “any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.”
Profiling can, as an example, be used in medical treatments to predict patients health based on specific characteristics.
For more information regarding profiling, see EDPB guidelines on Automated individual decision-making and Profiling.