What is Profiling Disclosure?

Definition

Profiling disclosure explains that you use automated means to evaluate people and what the consequences are. It often works together with opt-out and access rights in broad privacy regimes.

See also our AI compliance glossary for short definitions of common terms.

Which regulations require this

• Colorado Privacy Act (CPA profiling and ADM)

  Colorado profiling rules define three tiers: Solely Automated Processing, Human Reviewed Automated Processing, and Hu...

  COPrivacy ADMHighIn effect
• Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments

  Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000...

  CTPrivacy ADMHighUpcoming
• Maryland Online Data Privacy Act (MODPA), ADM and profiling provisions

  Statute effective October 1, 2025, but enforcement does not begin until April 1, 2026. The law does not apply to proc...

  MDPrivacy ADMMediumIn effect
• Minnesota Consumer Data Privacy Act - ADM and profiling provisions

  Minnesota is the first state privacy law to require controllers to create and maintain a data inventory. The right to...

  MNPrivacy ADMMediumIn effect
• Rhode Island Data Transparency and Privacy Protection Act - ADM provisions

  Rhode Island's privacy framework includes consumer rights tied to profiling and automated decisions, including opt-ou...

  RIPrivacy ADMMediumIn effect
• Virginia Consumer Data Protection Act (VCDPA, Profiling Provisions)

  Grants Virginia consumers the right to opt out of profiling in furtherance of decisions that produce legal or signifi...

  VAPrivacy ADMMediumIn effect
• New Hampshire Privacy Act - Profiling Provisions

  Grants New Hampshire consumers the right to opt out of profiling for decisions with legal or significant effects.

  NHPrivacy ADMMediumIn effect
• New Jersey Data Privacy Act (Profiling Provisions)

  Uniquely covers nonprofits with no revenue threshold. Universal opt-out mechanism (UOOM) requirement effective July 1...

  NJPrivacy ADMMediumIn effect
• Nebraska Data Privacy Act - ADM and profiling provisions

  Nebraska requires consumer opt-out rights and risk assessments for qualifying profiling and automated decisions with...

  NEPrivacy ADMMediumIn effect
• Texas Data Privacy and Security Act, Profiling Provisions (HB 4)

  Texas comprehensive privacy law with profiling provisions. Requires data protection assessments for profiling that pr...

  TXPrivacy ADMLowIn effect
• Indiana Consumer Data Protection Act - Profiling Provisions

  Grants Indiana consumers the right to opt out of profiling for decisions with legal or significant effects. Applies t...

  INPrivacy ADMLowIn effect
• Montana Consumer Data Privacy Act - Profiling Provisions

  Grants Montana consumers the right to opt out of profiling for decisions with legal or significant effects. 2025 amen...

  MTPrivacy ADMLowIn effect
• Oregon Consumer Privacy Act - Profiling Provisions

  Grants Oregon consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out li...

  ORPrivacy ADMLowIn effect
• Tennessee Information Protection Act - Profiling Provisions

  Grants Tennessee consumers the right to opt out of profiling for decisions with legal or significant effects. First s...

  TNPrivacy ADMLowIn effect
• Delaware Personal Data Privacy Act - Profiling Provisions

  Grants Delaware consumers the right to opt out of profiling for decisions with legal or significant effects. Opt-out...

  DEPrivacy ADMLowIn effect
• Kentucky Consumer Data Protection Act - Profiling Provisions

  Grants Kentucky consumers the right to opt out of profiling for decisions producing legal or significant effects. Vir...

  KYPrivacy ADMLowIn effect

Which states reference this obligation

What you should do next

• List each profiling activity, data categories, and business purposes.
• Separate marketing profiling from consequential eligibility decisions where rules differ.
• Update disclosures before launching new models that change scoring logic.
• Make the disclosure accessible, not only in an English-only PDF.
• Align web, mobile, and call-center scripts so stories stay consistent.