Sensitive personal data requiring additional protections—health, race, religion, sexual orientation, etc.
Special category data is sensitive personal data requiring additional protection under GDPR—racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification, health data, and data about sex life or sexual orientation. Processing special category data is generally prohibited unless specific conditions are met (explicit consent, employment obligations, vital interests, etc.). Extra safeguards are required when handling this data.
Why It Matters
The DSC Perspective:
Special category data carries elevated compliance requirements. If you process any special category data, ensure you have appropriate lawful basis and additional safeguards in place.