Under the PDPL, there is a separate subset of personal data referred to as “sensitive data”. This type of data requires additional safeguards and protections as the unauthorized access of such data may cause serious harm to the individual.
Sensitive data includes the following:
1. Personal data that reveals the racial or ethnic origin of an individual (e.g., skin color of an individual, etc.);
2. Personal data that reveals the religious, philosophical (intellectual) or political beliefs of an individual;
3. Personal data that reveals any prior criminal convictions and/or offenses of an individual;
4. Biometric data of an individual (where used for identification purposes);
5. Genetic data of an individual;
6. Personal data that is related to the health of an individual; and
7. Personal data that reveals whether the parentage (either one or both parents) of the individual is unknown.