Every individual is represented in digital form in numerous data sets. Commercial companies use these digital representations as a basis for making decisions that affect the individual. This has implications for privacy and autonomy of the individual and the ability to construct one's own identity. This study describes how digital representations are created and for what purposes. An analysis is made of the implications this has for individuals and why privacy, autonomy, and identity construction are at stake. In this context legal protection of individuals is provided by data protection legislation. The current framework, however, appears to be insufficient in relation to the problems identified in this study. Other legal constructs are assessed to see whether alternative approaches could help offer legal protection. Finally, a proposal is presented to embed the concepts of digital personae and profiles (as forms of digital representations) as portraits in data protection law.Arnold Roosendaal studied Dutch Law and obtained an LLM in Law and Technology. After his LLM, he followed a Research Master Programme, for which he obtained his MPhil. Arnold completed this PhD thesis at the Tilburg Institute for Law, Technology, and Society (TILT), Tilburg University, The Netherlands. Currently, he works at TNO, the Netherlands Organisation for Applied Scientific Research. In addition he is partner at Fennell Roosendaal Onderzoek en Advies. He has a great interest in law and technology and the implications of technological developments on society. Arnold has participated in several international research projects, such as FIDIS, PrimeLife, and PRISMS and has written several international publications. He regularly participates in conferences as a speaker or panelist.