Sensitive Data

A class of personal data that affects privacy or can cause discrimination if misused, including biometric data, health, racial or ethnic origin, political opinions, and sexual life. Under Law 1581 of 2012, sensitive data demands stricter safeguards and normally prior, express, informed consent unless specific legal exceptions apply for public functions.

Personal data revealing health information, biometric data for identification, racial or ethnic origin, political opinions, religious or philosophical beliefs, and other specially protected categories which require heightened legal safeguards and typically stricter lawful-basis conditions for processing.

Specific categories of personal data that warrant special protection—explicitly including racial or ethnic origin, political opinions, religious beliefs, health data, genetic data and similar categories—and for which the law imposes stricter regimes such as registration, declaration or prior authorization by the supervisory authority.

Personally identifiable information, confidential datasets, or proprietary information that pose privacy, legal, or ethical risks if disclosed or processed by third parties. The Guide warns against uploading sensitive data to external GAI platforms without appropriate contracts, data protection assessments, and technical safeguards.

Personal data that reveal or concern race or ethnicity, political opinions, religious or philosophical beliefs, health, sexual life, biometric or genetic data, and other categories enumerated by the law; processing of such data is restricted and requires stronger legal bases and protective measures.

Personal data that, due to its nature, requires enhanced safeguards (for example data concerning minors, vulnerable sources, intimate details or other identifiers that could cause harm if disclosed). The Guide applies stricter handling, minimisation and consent requirements to sensitive data in line with the Data Protection Act.

Personal data categories that merit higher protection (for example health information, racial or ethnic origin, political opinions, religious beliefs, sexual life or orientation) which the guidance warns should be avoided when using third-party AI services unless strictly necessary and compliant with GDPR and national law. Schools are advised to perform data-protection checks and minimize sharing of such data with AI providers.

Information that reveals racial origin, political opinions, religious beliefs, health, or sexual orientation, requiring higher levels of protection and express consent.

Personal data that reveals racial or ethnic origin, political opinions, religious beliefs, or health information, requiring explicit consent for processing.

Defined as personal data that reveals or infers a mental or emotional state, health information, biometric identifiers, or other information used for psychological profiling or emotional analysis. The collection and use of such data are subject to specific regulations.