Question: what are the differences between the data protection act and gdpr?
Answer: Automated decision making/processing The GDPR states that data subjects have a right not to be subject to automated decision making or profiling, whereas the DPA allows for this whenever there are legitimate grounds for doing so and safeguards are in place to protect individual rights and freedoms.