Key Concept 2 — Sensitive Data

Some data can cause serious harm if misused — the law protects it more strictly.

Sensitive data (also called special categories of personal data) can lead to discrimination, exclusion or other serious harm. The categories differ between laws, so always check your local list.

What is typically sensitive

  • Health data, including sick notes, disabilities and vaccination status
  • Racial or ethnic origin, religious and political beliefs
  • Trade union membership, sexual life and orientation
  • Genetic and biometric data, e.g. fingerprints for time recording
  • Often treated with similar care: criminal records, financial data, national ID numbers and data about children

What this means in practice: stricter conditions such as explicit or written consent, stronger security, access only for those who need it, and in many laws a risk assessment before you start.

Sensitive data in your jurisdiction

Peru
  • Biometric data
  • Racial and ethnic origin
  • Economic income
  • Political, religious, philosophical or moral opinions and beliefs
  • Trade union membership
  • Health and sexual life

Datos sensibles (Art. 2 Law 29733). Processing generally requires written consent of the data subject.

ResGuard — Data Protection Workshop 1 · Task 1 · Jurisdiction: Peru Slide 3 of 10