In its most basic definition, sensitive data is a specific set of “special categories”:
- Genetic data
- Political opinions
- Racial or ethnic origin
- Data concerning health
- Trade union membership
- Religious or philosophical beliefs
- Data concerning sex life or sexual orientation
- Biometric data (where processed to uniquely identify someone)
Article 9 of the GDPR prohibits special category data from being processed unless you can rely on an exemption.