Home Privacy Law GDPR Article 9 GDPR (Processing of special categories of personal data)

Article 9 GDPR (Processing of special categories of personal data)

Understanding Article 9 of GDPR

Article 9 of GDPR outlines the different categories of special personal data requiring further protection under the law and even prohibited.

Prohibition of processing special categories of personal data (Article 9(1) GDPR)

GDPR specifically names different categories of personal data that are quite important to individuals and therefore the processing should be prohibited.

These categories are:

  1. Racial data
  2. Ethnic origin
  3. Political opinions
  4. Religious beliefs
  5. Philosophical beliefs
  6. Trade union membership
  7. Genetic data
  8. Biometric data for identifying a person
  9. Health data
  10. Data on a person’s sex life
  11. Data on a person’s sexual orientation 

Exceptions to the prohibition (Article 9(2) GDPR)

In certain cases, the processing of the special categories of data can be possible when:

  1. The data subject has given explicit consent (Article 9(2)(a) GDPR)
  2. The processing is necessary to carry out an obligation and exercise a right in the field of employment, social security, social protection or collective agreement regarding a fundamental right (Article 9(2)(b) GDPR)
  3. For the vital interest of the data subject or a person not capable of giving consent (Article 9(2)(c) GDPR)
  4. For a legitimate activity with appropriate safeguards by a foundation, association or not-for-profit organization (Article 9(2)(d) GDPR)
  5. If the data is made public by the data subject (Article 9(2)(e) GDPR)
  6. When the processing is necessary to exercise a legal claim or defence (Article 9(2)(f) GDPR)
  7. When it’s necessary for the public interest (Article 9(2)(g) GDPR)
  8. For the rendering of health or social care services (Article 9(2)(h) GDPR)
  9. When it’s necessary for the public interest in the area of health to prevent cross-border threats to health(Article 9(2)(i) GDPR)
  10. When it’s necessary for archiving, scientific or historical research purposes in the public interest (Article 9(2)(j) GDPR)

Processing for health and social care purposes (Article 9(3) GDPR)

A special category of data can be processed for health and social care purposes provided that the data is processed by a professional bound by a professional code and obligations of confidentiality or secrecy.

Member states to introduce further conditions (Article 9(4) GDPR)

As it relates to the processing of personal data under a special category, each European Union member state can introduce legislation to further restrict or limit the processing of genetic, biometric data or data concerning the health of a data subject.

Recitals applicable to Article 9 of GDPR

Relevant Recitals: 46, 51, 52, 53, 54, 55, 56

GDPR Regulation article-by-article overview

Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.

Cited Legislation in Article 9 or relevant recitals

Regulation (EC) No 1338/2008

GDPR Text: Article 9 of GDPR and Relevant Recitals

GDPR Text Source: EUR-Lex

Official GDPR Text: General Data Protection Regulation 

Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)

Editorial Staff
Hello Nation! I'm a lawyer by trade and an entrepreneur by spirit. I specialize in law, business, marketing, and technology (and love it!). I'm an expert SEO and content marketer where I deeply enjoy writing content in highly competitive fields. On this blog, I share my experiences, knowledge, and provide you with golden nuggets of useful information. Enjoy!

Most Popular

What Is Price Fixing (Explained: All You Need To Know)

What Is Price Fixing (Explained: All You Need To Know)

What Is Interest Coverage Ratio (Explained: All You Need To Know)

What Is Interest Coverage Ratio (Explained: All You Need To Know)

What Is Value Based Pricing (Explained: All You Need To Know)

What Is Value Based Pricing (Explained: All You Need To Know)

What Is Inventory Turnover Ratio (Explained: All You Need To Know)

What Is Inventory Turnover Ratio (Explained: All You Need To Know)

Bear With Me Meaning (Explained: All You Need To Know)

Bear With Me Meaning (Explained: All You Need To Know)

Editor's Picks

Intellectual Property Clause (Overview: All You Need To Know)

Intellectual Property Clause (Overview: All You Need To Know)

Its Signature (Contract Signature: All You Need To Know)

Its Signature (Contract Signature: All You Need To Know)

Which of The Following Is An Example of An Automatic Stabilizer?

Which of The Following Is An Example of An Automatic Stabilizer?

New York Business Search (Guide: All You Need To Know)

New York Business Search (Guide: All You Need To Know)

Idaho Secretary of State Business Search (Step-By-Step)

Idaho Secretary of State Business Search (Step-By-Step)