Sensitive personal data under the GDPR, such as health, biometrics, or beliefs, that receives stronger protection and stricter processing conditions.
Article 9 of the GDPR defines special categories of personal data, including racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic and biometric data, health, and data about sex life or orientation. Processing it is prohibited unless a specific condition applies, such as explicit consent or a substantial public interest.
Because misuse can cause serious harm, this data usually calls for stronger safeguards and often a data protection impact assessment.
Related frameworks
KaitoSec