Both GDPR and UK GDPR restrict profiling and solely automated decision-making in protecting personal, private data. This raises serious questions about organizations’ ability to use big data to analyze and interact with customers. Can this be done under GDPR and UK GDPR?