Key Concept 2 — Sensitive Data
Sensitive data (also called special categories of personal data) can lead to discrimination, exclusion or other serious harm. The categories differ between laws, so always check your local list.
What this means in practice: stricter conditions such as explicit or written consent, stronger security, access only for those who need it, and in many laws a risk assessment before you start.
Sensitive personal data (Art. 5 FADP). Where consent is required, it must be explicit, and disclosing sensitive data to third parties needs a justification.