Special category data (GDPR)

This used to be called ‘Sensitive personal data’ under the Data Protection Act 1998. Article 9(1) GDPR prohibits processing of special categories of personal data except in the circumstances set out in Article 9(2). It is data that reveals a data subject's:

  • Racial or ethnic origin
  • Political opinions
  • Religious and philosophical beliefs
  • Trade union membership
  • Genetic data
  • Biometric data for the purpose of uniquely identifying a natural person
  • Data concerning health
  • Sex life and sexual orientation

To process any special category data, at least one condition listed in Article 9(2) GDPR must be met. See also Subject access request letter template, Grievance, discipline, dismissal and GDPR, Your right to privacy at work – personal emails and WhatsApp messages, Your rights under GDPR, The Data Protection Act 2018 and GDPR ,  Personal information about criminal convictions and offences