Oposiciones →
Module 3 of 7 · 15 min

Special data: health, trade union, origin

Free data protection course: read the module, review with the questions and move on to the next one. At the end, a test and a PDF certificate.

Module 3 of 7 · Course contents

Some data is so sensitive that processing it is, in principle, prohibited (GDPR, article 9.1):

  • Racial or ethnic origin, political opinions, religious or philosophical beliefs.
  • Trade union membership.
  • Genetic data and biometric data that identify a person (for example, fingerprints).
  • Health data, physical or mental (article 4.15).
  • Sex life or sexual orientation.

When it can be processed

Only in the cases of article 9.2: for example, with explicit consent or when needed to meet obligations under employment and social security law.

In practiceSaying in the team chat that a colleague «is off sick with depression» discloses health data. Sick leave is handled by whoever has to handle it, discreetly.

Source: Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), articles 4.15 and 9

Quick review

Check that you've understood. These are questions from the final test: tap an answer to see whether it's right and why.

Which of these is special category data?

Can health data ever be processed at work?

Module practice test

5 new questions, different from the final test. Tap an answer to see whether it is right, why, and which rule it comes from.

1. Is a fingerprint used to clock in special data?

2. What is «data concerning health»?

3. What is the general rule for special data?

4. Are a colleague's religious beliefs special data?

5. What kind of consent does article 9.2 mention for special data?

Course contents