sec_3_3_1__para__8

The CRD requirement is limited to information about the fact of personalisation. This is an additional information requirement that should be complied with at the time of offering a personalised price. It is ‘without prejudice to Regulation (EU) 2016/679, which provides, inter alia, for the right of the individual not to be subjected to automated individual decision-making, including profiling’ (Recital 45 of Directive (EU) 2019/2161). Personalised pricing may fall under the specific rules on automated decision-making in Article 22 of the GDPR (94). Other GDPR requirements relevant in this context include the requirement for a legal basis under Article 6, as well as the information obligations under Articles 12 to 14.

← sec_3_3_1__para__7 · All articles · sec_3_3_1__para__9 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.