Recital 72
Recital 72 of the GDPR, as in force since 25 May 2018. Its key is gdpr-recitals:rec-72.
Profiling is subject to the rules of this Regulation governing the processing of personal data, such as the legal grounds for processing or data protection principles. The European Data Protection Board established by this Regulation (the ‘Board’) should be able to issue guidance in that context.