GDPR distinguishes between standard personal data and special categories of personal data (sensitive data) that require enhanced protection.
Special Categories of Personal Data
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic and biometric data
- Health data
- Sex life or sexual orientation
Processing special category data is generally prohibited unless specific conditions are met.