2026-09-20T22:21:23Zhttps://api.repository.cam.ac.uk/server/oai/request

oai:www.repository.cam.ac.uk:1810/3854982025-06-14T00:43:25Zcom_1810_183645com_1810_256063col_1810_221901

Just(ifying) algorithms: Data-driven automated predictions about unobservable targets and the General Data Protection Regulation https://doi.org/10.17863/CAM.119081 Hands, Lily Deakin, Simon Predictive algorithms are increasingly used to profile, rank, classify, and make decisions about groups and individuals. Data-driven machine learning techniques, in which statistical models are developed and updated without any initial prior theory about which data are related to a classification, and how, now account for many applications. Despite increasing demand for data-driven prediction, there is broad academic, policy and societal consensus that these techniques create various and novel risks of harm. However, it remains unclear whether data protection law, specifically the General Data Protection Regulation (GDPR), requires both the process and outcomes of data-driven predictions to be substantively justified. While some scholars have argued that the GDPR does not contain a ‘right to reasonable inferences’, recent case law and regulatory guidance suggest that the data protection principles in Article 5 of the GDPR, read with related provisions, may be more relevant than previously suggested. This thesis examines whether, and in what ways, individuals are protected against substantively unjustified predictions about their future behaviour under the GDPR. It first extends the discourse on algorithmic fairness by delineating inherent technical limitations of data-driven prediction. Distinguishing between targets of interest which are unobservable, evaluative and merely unobserved, the thesis identifies a number of irreducibly normative questions about the first of these. Drawing on these insights, the thesis then engages in a close analysis of case law and regulatory guidance on the interpretation of relevant provisions of the GDPR, especially the previously underexplored data protection principles. The thesis argues that judicial and regulatory interpretations of the GDPR are evolving as datadriven prediction and its underlying technologies place increasing pressure on data protection law to protect individuals against unfair predictions about their future behaviour. The data protection principles have normative force of their own, and are increasingly and consistently interpreted as operating independently of other provisions. Relevant provisions require substantive as well as procedural fairness of inputs and outputs. As such, this thesis clarifies the relevance, nature and application of normative standards for prediction under the GDPR. The unrelenting development and deployment of data-driven predictive models suggests that the trend towards broader interpretation of the GDPR will continue. University of Cambridge 2024-05-21 Thesis Doctoral Doctor of Philosophy (PhD) Cambridge Law Journal Studentship; award by the Electors of the Wright Rogers Scholarship https://www.repository.cam.ac.uk/handle/1810/385498 https://apollo8-f-pro.lib.cam.ac.uk/bitstreams/9595dd8a-2f2d-4076-a104-c5c09bb38c51/download c152a0dfdf165ff20f4d5930ab29c57e https://apollo8-f-pro.lib.cam.ac.uk/bitstreams/bb85d779-0872-420f-aac4-b06114b6686f/download 87eda9de84448d1f82354d60eee3eb5f http://purl.org/NET/rdflicense/allrightsreserved GDPR General Data Protection Regulation Artificial Intelligence Data-driven prediction Data protection principles Predictive optimization Article 5 GDPR Algorithmic fairness