What is the difference between standard PII and special category data?

Standard PII identifies a person directly or indirectly, names, emails, phone numbers. Special category data (GDPR Article 9) is more sensitive, health data, biometrics, racial origin, religious beliefs, and requires explicit legal justification to process, with higher fines for breaches.

Is an email address standard PII or special category data?

An email address is standard PII. It directly identifies an individual but does not fall under GDPR Article 9 special categories. However, it still requires a lawful basis for processing under GDPR Article 6.

What are examples of GDPR special category data?

GDPR Article 9 special category data includes: health and medical data, biometric data (fingerprints, facial recognition), genetic data, racial or ethnic origin, religious beliefs, political opinions, trade union membership, and data concerning sex life or sexual orientation.

What fines apply to special category data breaches under GDPR?

Breaches involving GDPR Article 9 special category data can result in fines of up to €20 million or 4% of annual global turnover, whichever is higher. This is the maximum tier of GDPR sanctions.

PII Knowledge Quiz | PrivacyPromptAI

Standard or Special Category? Test Yourself

Tap a card, pick the right category, and watch your score climb. Working with medical records? See how PII compares to PHI.

0 / 8

Correct

Wrong

✉️

Loading…

tap a button below

🏆

Privacy expert!

Nothing uploaded No account needed Free core tool 23 languages

PII Info Test: GDPR & Privacy Challenge

Standard or Special Category? Test Yourself