Sensitive personal information
Highly sensitive personal data requiring explicit consent.
How the laws define this
Global regulators agree that sensitive personal information constitutes a high-risk category of personal data—consistently encompassing health and medical details—that demands heightened security measures and stricter processing conditions. The primary point of divergence lies in how these instruments define the scope of sensitivity and the specific obligations imposed on data controllers. The Data Privacy Act of 2012 (Republic Act No. 10173) relies on an exhaustive catalog of specific individual traits, including age, marital status, color, education, and offense proceedings, requiring explicit consent or legal authorization. Conversely, the Personal Information Protection Law of the People's Republic of China (PIPL) and An Act to modernize legislative provisions as regards the protection of personal information (Law 25) introduce harm-based criteria centered on risks to personal dignity, safety, or intimate privacy. Furthermore, the Personal Information Protection Law of the People's Republic of China (PIPL) uniquely mandates separate consent and covers specific identities, whereabouts, financial accounts, biometrics, and details of minors under 14, whereas Law 25 focuses on financial situations, biometrics, and intimate information carrying a higher risk of harm upon disclosure.
Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.
Definitions (3)
A subset of personal information that includes race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, and any proceedings for offenses committed or alleged to have been committed; these categories receive heightened protection and generally require explicit consent or specific legal authorization to process.
Personal information that, once leaked or illegally used, may easily infringe upon personal dignity or endanger personal or property safety, including biometrics, medical health, financial accounts, religious beliefs, specific identity, whereabouts, and personal information of minors under 14. Processing of such data requires separate consent and stricter protective measures.
Includes data related to an individual's health, biometric characteristics, financial situation, or any other information of an intimate nature, where disclosure carries a higher risk of harm.
Related Terms
Sensitive Data
Data requiring stricter protection due to privacy risks....
Sensitive data (special categories)
Personal data revealing protected characteristics....
special personal information
Sensitive categories of personal data requiring stricter protection....
sensitive information
Special-category personal data requiring heightened protection....
Sensitive personal data
Personal data warranting enhanced protections....