When is personal data “sensitive”?
Yet another in my stunning series of articles about the GDPR that nobody will read…
In the GDPR, there are two categories of personal data: regular and “sensitive.” Article 9 talks about Processing of special categories of personal data.
“Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited.”
Those are strong words at the end of that opening paragraph: shall be prohibited.
This appears to be a shout-out to the European Convention on Human Rights, Article 8, which spells out the Right to Privacy.
“Everyone has the right to respect for his private and family life, his home and his correspondence.”
