Special category data (GDPR)

This used to be called ‘Sensitive personal data’ under the Data Protection Act 1998. Article 9(1) GDPR prohibits processing of special categories of personal data except in the circumstances set out in Article 9(2). It is data that reveals a data subject's:

Racial or ethnic origin
Political opinions
Religious and philosophical beliefs
Trade union membership
Genetic data
Biometric data for the purpose of uniquely identifying a natural person
Data concerning health
Sex life and sexual orientation

To process any special category data, at least one condition listed in Article 9(2) GDPR must be met. See also Subject access request letter template, Grievance, discipline, dismissal and GDPR, Your right to privacy at work – personal emails and WhatsApp messages, Your rights under GDPR, The Data Protection Act 2018 and GDPR , Personal information about criminal convictions and offences