Required actions
- Provide opt-outs from profiling for decisions with legal or similarly significant effects and disclose profiling logic in the privacy notice per the Attorney General's rules - Complete data protection assessments for profiling that risks unfair or unlawful disparate impact - Follow the 2025 amendments on biometric identifiers and minors' data