Skip to content

Glossary · Finance and compliance

Special category data

Special category data is the personal data the GDPR protects most strictly because its misuse can cause serious harm: among others, health, biometric and genetic data, political opinions, religion, trade union membership and sexual orientation.

Special category data: the details

Article 9 of the General Data Protection Regulation prohibits processing it unless one of its exceptions applies: the person’s explicit consent, the provision of health care, an obligation in the field of employment or a substantial public interest, among others. An ordinary legal basis isn’t enough: you need both.

For the software that handles it, that translates into specific measures. Access limited to those who need it for their role, a log of every lookup, encryption and an impact assessment when processing is large-scale. With artificial intelligence you also have to decide which data may leave for an outside provider, in which region it is processed and under which data processor agreement.

Special category data in a project

In projects for clinics and insurers, the AI works on the administrative side—appointments, reminders, documents—and takes no part in clinical decisions. Access is by role and every lookup is logged.

On this site

Where we apply it

All services

Glossary

Related terms

See the whole glossary

Get started

Does this come up in your project?

Tell us which system you have and what is still done by hand. We’ll tell you where we would start and whether it fits.

Before you write, see how we price a project or our solutions by department.

Fig. 07Morse keyH · E · L · L · O