Under the GDPR, sensitive information, also known as special category data, includes the following types:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data
- Biometric data (when used to uniquely identify someone)
- Health data
- Data concerning a person's sex life or sexual orientation
Information that does not fall into one of these categories is generally not considered sensitive under the GDPR. For example, common personal data like names, addresses, email addresses, or gender is not classified as sensitive information under GDPR. So, if the list includes something like "gender," that would NOT be considered sensitive information under the GDPR, unlike racial origin or political opinion which are sensitive categories.
