Sensitive data (or “Special categories” of personal data as it’s called in GDPR) is information that requires additional protection as the processing or mishandling of this data could result in a greater risk to the rights and freedoms of individuals.

Sensitive personal data is data revealing

• racial or ethnic origin
  political opinions
  religious or philosophical beliefs
  trade union membership
  processing of genetic data
  biometric data for the purpose of uniquely identifying a natural person
  data concerning health
  data concerning a natural person’s sex life or sexual orientation