Answer capsule
ICO guidance makes data collection, inference, fairness, preferences, and significant decisions part of marketing design.
What the source establishes
- The ICO describes profiling as analysis of interests, habits, and behavior.
- People have a right to object to direct marketing, including related profiling.
- Sensitive data and significant automated decisions require added care.
Inference is still data use
A profile inferred by a model can be more intrusive than a field the customer supplied. The CMO should know which attributes are inferred and how they affect treatment.
Relevance is not fairness
A message can perform well while relying on a harmful proxy, excluding a group, or exploiting vulnerability. Performance review needs a separate fairness and customer-impact lens.
Preference enforcement belongs upstream
Opt-out and channel restrictions should be applied before an AI system selects or generates the message, not checked manually after activation.
Create a challenge route
Customers and service teams need a practical way to question, correct, or stop profiling-driven treatment.
Turn this source into a reviewable decision
For AI for CMOs, use this briefing as a dated decision record rather than a substitute for the source. Preserve UK Information Commissioner's Office, the exact URL, the July 20, 2026 review date, the supported facts above, the editorial interpretation, the limitations, and any buyer-specific evidence. Link that record to the decisions most directly affected: Audience and market insight; Creative development and production; Content supply-chain operations; Media planning and activation. State whether the source changes the scope, evidence requirement, control, sequence, or only the language used to describe the decision.
Before action, name the accountable owner, affected population and workflow, exact offering or configuration, source data and rights, human decision point, exception and appeal path, complete cost, expected benefit, failure and stop conditions, retained evidence, and next review date. Keep official facts, provider statements, buyer observations, representative tests, measured outcomes, editorial inferences, and unknowns visibly separate. Reopen the record when the source, offer, model, integration, data, policy, population, responsible person, or measured result changes.
Decision test
Ask whether the source changes the decision itself, the evidence required, the implementation sequence, or only the language used to describe an existing capability. Record which claims are directly supported, which are provider statements, which require an independent test, and which remain unknown. A source-linked review should make uncertainty easier to see, not bury it inside a blended score.
Questions to take into review
- Which people and channels are represented?
- Can each insight be traced to evidence?
- What training, input, and output rights apply?
- Which review gates cover claims and brand expression?
- Which repository owns approved content?
- How are market and channel variations controlled?
- What is the optimization target?
- Which placements and audiences can be excluded?
The publication supports research and executive decision preparation. It does not provide legal, financial, accounting, employment, clinical, cybersecurity, investment, procurement, or implementation advice.