Key References:

  • Art. 9
  • Recitals 34-35, 51, 71.

Sensitive personal data = Special categories of personal data (Recital 10).

Art. 9(1) Key elements:

  • Sensitive data is personal data that reveals a data subject’s:
    • racial or ethnic origin
    • political opinions
    • religious or philosophical beliefs
    • trade union membership
    • genetic data (defined in Art. 4(13), Recital 34)
    • biometric data (defined in Art. 4(14))
    • health data (defined in Art. 4(15), includes physical, mental, and status of health)
    • sex life or sexual orientation data.
  • General prohibition on processing sensitive personal data unless specific conditions listed in Art. 9(2) (a) – (j) are met.