FORMAL ANSWER

Special categories of personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and genetic data, biometric data processed for the purpose of uniquely identifying a natural person, as well as data concerning health, sex life or sexual orientation. Processing of special categories of data is restricted, as is processing of data relating to criminal convictions and offences (Article 10 GDPR).

PRACTICAL ANSWER

Simply put, special category data — or “sensitive” data — is a group of personal data subject to special processing and protection rules. Because of their exceptional nature, detailed rules apply to handling them, often regulated by separate sector-specific provisions. Sick leave records kept by an employer can also qualify as sensitive data.

MORE

• For those starting their GDPR journey, we recommend: GDPR Fundamentals training