Set by the law · GDPR Art. 9(1)

Special categories of personal data

In plain English

Sensitive data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, health, sex life or sexual orientation. Processing them is banned unless an exception applies.

The official text

Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited.

Regulation (EU) 2016/679 (GDPR), Article 9(1)EUR-LexRead it on Fino →

Paragraph 1 shall not apply if one of the following applies:

Regulation (EU) 2016/679 (GDPR), Article 9(2)EUR-LexRead it on Fino →

‘special categories of personal data’ means the categories of personal data referred to in Article 9(1) of Regulation (EU) 2016/679, Article 10 of Directive (EU) 2016/680 and Article 10(1) of Regulation (EU) 2018/1725

Regulation (EU) 2024/1689 (AI Act), Article 3(37)EUR-LexRead it on Fino →

362 decisions on Fino cite Article 9 GDPR. See them →

Related

The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.