Skip to main content

AI Summary of Article 9 Processing of special categories of personal data

The processing of sensitive personal data, including information relating to racial or ethnic origin, political beliefs, health, and sexual orientation, is generally prohibited. Exceptions arise where explicit consent has been provided, or processing is necessary for legal obligations, protection of vital interests, legitimate activities of non-profit bodies, or public interest.

Further provisions exist for processing data related to health and scientific research, contingent on adherence to Union or Member State law, ensuring safeguards for individual rights. Member States retain the authority to implement additional conditions regarding the handling of such sensitive data.

Version status: Applicable | Document consolidation status: Updated to reflect all known changes
Version date: 25 May 2018 - onwards
Version 3 of 3

Article 9 Processing of special categories of personal data

1. Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited.

2. Paragraph 1 shall not apply if one of the following applies:

(a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject;

(b) processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject;