Ambient intelligence and the profiling activities authorized by modern technologies oblige us to renew our legislation in different directions. Traditionally, data protection law considers only the relationship between data controllers and data subjects positioned as independent entities. However, in the ambient intelligence reality where profiling activities proliferate, enabled by more and more sophisticated software algorithms, their societal impacts have to be taken into consideration by legislative bodies.