Inferred Data
Definition
Information derived or deduced about individuals through analysis, correlation, or prediction based on other data rather than directly provided by or about them. Inferred data includes predictions about preferences, interests, behavior, attributes, or characteristics created through algorithms, analytics, or profiling. Examples include inferred demographics, predicted purchasing interests, calculated credit scores, assessed job performance ratings, or estimated future behaviors. While individuals provide some data directly, inferred data represents conclusions drawn from that data. Privacy implications arise because individuals may not know what's been inferred, inferences may be inaccurate, and inferred data can affect opportunities and treatment. CCPA explicitly includes inferences as personal information. Under GDPR, inferences that identify individuals are personal data. Organizations should be transparent about inferences created, provide access to significant inferences, allow correction of inaccurate inferences where feasible, implement fairness safeguards in inference processes, and carefully use sensitive inferences.
Applicable Laws & Regulations
- 1CCPA Section 1798.140(v)(1)(K) - Inferences as personal information
- 2GDPR Article 4(1) - Inferred data as personal data when identifying
- 3GDPR Article 22 - Automated decision-making including inferences