The arrival of the GDPR, without a doubt, set the rules to avoid any arbitrariness in processing personal data. However, there are certain types of data that the General Data Protection Regulation considers sensitive personal data. It, therefore, classifies them in a particular category of personal data.
Which are those particular categories of personal data?
The GDPR clearly defines what data is considered sensitive personal data and falls into this particular category:
- Data related to racial or ethnic origin.
- Political beliefs.
- Religious or philosophical beliefs.
- Union membership.
- Genetic data.
- Biometric data for the unique identification of a natural person.
- Health data.
- Data relating to an individual’s sex life or sexual orientation.
The GDPR prohibits the processing of the above types of data. However, there are some exceptions to the rule.