What is sensitive personal data?

Sensitive data (or “Special categories” of personal data as it’s called in GDPR) is information that requires additional protection as the processing or mishandling of this data could result in a greater risk to the rights and freedoms of individuals.

Sensitive personal data is data revealing

  • racial or ethnic origin
    political opinions
    religious or philosophical beliefs
    trade union membership
    processing of genetic data
    biometric data for the purpose of uniquely identifying a natural person
    data concerning health
    data concerning a natural person’s sex life or sexual orientation