Hyper-personalisation of services vs data protection: a new trend or a threat to privacy

15 January 2024 | Knowledge, News, The Right Focus

Personalised communications and marketing messages tailored to the individual customer are now an fundamental and routine tool of modern and effective marketing.

Customised content, advertising on social media, or even shopping recommendations in online shops – messages and products that are tailored to the customer and meet his or her needs, or even create needs that the customer is often not even aware of – are the basis of marketing activities.

Hyper-personalisation: a world where machines know more about us than we do

Personalisation is already standard, but what happens when we move to the level of hyper-personalisation?

When marketing messages no longer rely on simple data analysis based on gender, age and past purchases, but are the result of advanced algorithms, machine learning and big data analytics. When we are talking about large-scale activities where consumer data collected from multiple sources (such as social media, purchase history, website activity, geolocation, etc.) is analysed by algorithms capable of detecting patterns and relationships invisible to the human eye (often even to the individual), privacy risks cannot be overlooked.

The resulting detailed behavioural profile of the user captures the user’s preferences, interests and behaviours and, based on this, predicts their future needs and customises content and services.

If we consider that we are not only talking about shopping preferences in a clothing store, but also a personalised workout plan in a fitness app, a shopping history in an online drugstore (often linked to a pharmacy), a streaming platform that suggests movies and series (based on previous choices), personalised newsletters, information portals (where a universal layout is replaced each time by information tailored to the user), it becomes clear that in almost every aspect of our lives and daily choices, our decisions are significantly influenced by marketing messages derived from advanced analytics.

If we combine the above examples, it is clear to the naked eye how pervasive this intrusion can be and how wide the range of our data is now available to service and product providers.

Hyper-personalisation and GDPR

The more data, the greater the risk of breaches, leakages or misuse. Despite the fact that GDPR regulations are now several years old, there are still many organisations that apply the data protection rules in an inadequate or even inappropriate manner.

The vagueness of the rules (which is in many ways an advantage of the new regulations) is also undoubtedly a gateway to abuse and irregularities. Moreover, the risks associated with hyper-personalisation include not only potential privacy violations, but also manipulation by using the collected data to influence consumer decisions.

The fact is, however, that deep personalisation is on the rise. Studies have shown that consumers are in favour of a personalised approach. And they see this kind of unique treatment as something positive that strengthens their commitment to their relationship with a particular brand.

Hyper-personalisation is a sign of the times

The new phenomenon of hyper-personalisation is the result of technological amplification, whereby previous personalisation, limited in its simplicity by technological capabilities, takes on a new dimension by fully exploiting the potential of AI, ML or Big Data.

The process of deep personalisation is also one of continuous, real-time optimisation. Algorithms fed by data are in a constant learning mode, allowing for continuous improvement and ever more accurate customisation of content.

Hyper-personalisation is certainly a powerful tool that has the potential to revolutionise the way we use and are targeted by services and products.

At the same time, it will undoubtedly reinforce the information bubbles in which we already live and will also be a powerful intrusion into our privacy.

These threats can be addressed through appropriate legislation or education to raise consumer awareness of the risks and consequences of operating in the digital world and handling personal data.

The future of hyper-personalisation therefore depends on how well we can balance these two aspects.

Product and service providers will certainly have to pay increasing attention to the protection of personal data and transparency in their operations, allowing consumers to have control over their data and full knowledge of how it is used.

 

Questions? Contact us

 Natalia Kotłowska-Wochna

Latest Knowledge

Protecting yourself against tax risks in the deposit-return system

The deposit-return system has been in place since October 2025, raising significant tax concerns from the outset. Although the regulations came into force, it was unclear for a long time how to apply them in practice. Some of the regulations needed clarification, some solutions were missing and the published explanations did not cover all the key issues. Consequently, the market began to develop its own operating standards.

Banking sector overview | Banking today and tomorrow | March 2026

On 12 February 2026, the Court of Justice of the European Union (CJEU) issued a judgment concerning the use of the WIBOR index in loan agreements. The CJEU judges confirmed that, in consumer cases, courts cannot examine the correctness of the WIBOR calculation. The banks had correctly informed their clients about the reference rate in accordance with national and EU law.

The issue of the National Labour Inspectorate reform has resurfaced

A new draft law proposing changes to the way the National Labour Inspectorate operates has been submitted to the Sejm. During its first reading on 25 February, the draft was not rejected and was therefore referred to the Social Policy and Family Committee for further consideration. Despite the concerns and controversies raised so far, including by businesses, the legislature continues to pursue the thorough modernisation of Poland’s employment model, which involves increased supervision of the labour market and curbing the abuse of civil law contracts. In this article, we will take a look at the proposals included in the new draft and explain what they mean for businesses.

Polish AI boom

According to the latest data, nearly 15,000 companies dealing with artificial intelligence were registered in Poland in 2025.[1] This testifies to an undoubted boom in AI, as well as to the dynamic changes related to the development of this technology. However, amid the rush to implement AI, do companies consider the most important issue: securing the outcomes of their work and protecting themselves against competitors? In this article, we explore this issue and suggest ways to avoid costly problems.

Length of service now includes periods of self-employment

The length of service no longer depends solely on work carried out under a contract of employment. The amendment to the Labour Code introduces significant changes, as work carried out under civil law contracts or as part of business activity will now also be included when calculating service, which affects employees’ rights. What will this mean for employees and employers?

Banking sector overview | Banking today and tomorrow | February 2026

The Polish banking sector is undergoing intense reshuffling on a scale not seen for years. Large banks are changing owners, foreign players are shifting their strategies and new investors are entering the market. The question is whether these are just temporary shifts in capital or the beginning of lasting change in the industry’s balance of power.

31 January. Don’t forget about the DAC7 Directive

The deadline for meeting the obligations under the DAC7 directive and the Polish regulations implementing it is fast approaching. Online platform operators must fulfil their reporting obligations by 31 January 2026 at the latest with regard to 2025 data. For many, this is the final opportunity not only to prepare the required information, but also to verify whether DAC7 obligations apply to them and, if so, to what extent.

Contact us:

Natalia Kotłowska-Wochna

Natalia Kotłowska-Wochna

Attorney-at-Law / New Tech, IP, Trade & Logistics Practice Group / Head of New Tech M&A

+48 606 689 185

n.kotlowska@kochanski.pl