Special categories of data (Sensitive data)

Categories of personal data that are considered particularly sensitive—such as health data, biometric data, and criminal conviction data—and that attract stricter conditions, formalities and prior authorization requirements under the Act. Processing these categories is subject to heightened safeguards, consent/formality rules and often prior review by the supervisory authority.

Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data for identification, health data or data concerning a person's sex life or sexual orientation; processing of these categories is subject to stricter conditions, safeguards and legal bases under the national adaptation to the GDPR. The law specifies national rules and higher safeguards for certain categories (e.g., health, genetic, biometric, criminal conviction data).