What is the difference between standard PII and special category data?

Standard PII identifies a person directly or indirectly, names, emails, phone numbers. Special category data (GDPR Article 9) is more sensitive, health data, biometrics, racial origin, religious beliefs, and requires explicit legal justification to process, with higher fines for breaches.

Is an email address standard PII or special category data?

An email address is standard PII. It directly identifies an individual but does not fall under GDPR Article 9 special categories. However, it still requires a lawful basis for processing under GDPR Article 6.

What are examples of GDPR special category data?

GDPR Article 9 special category data includes: health and medical data, biometric data (fingerprints, facial recognition), genetic data, racial or ethnic origin, religious beliefs, political opinions, trade union membership, and data concerning sex life or sexual orientation.

What fines apply to special category data breaches under GDPR?

Breaches involving GDPR Article 9 special category data can result in fines of up to €20 million or 4% of annual global turnover, whichever is higher. This is the maximum tier of GDPR sanctions.

Quiz sulla conoscenza dei dati personali

Standard o categoria speciale? Mettiti alla prova

Tocca una carta, scegli la categoria giusta e guarda il tuo punteggio salire. Lavori con cartelle cliniche? Scopri come i dati personali si confrontano con i dati sanitari.

0 / 8

Corretto

Sbagliato

✉️

Caricamento…

tocca un pulsante qui sotto

🏆

Esperto di privacy!

Nulla viene caricato Nessun account necessario Strumento base gratuito 23 lingue

Test di conoscenza sui dati personali: sfida GDPR e privacy

Standard o categoria speciale? Mettiti alla prova