Using computers to analyze data and make decisions. The GDPR restricts the use of purely automated processing from making important decisions about people’s rights and freedoms. A common paradigm is having a “human in the loop” to review the results of automated processing.