Sensitive Personal Data

Section 1 of the Act specifies eight categories of sensitive personal data.

These are data consisting of information as to the Data Subject's:

Compliance with the first data protection principle requires that the processing of sensitive personal data is fair, lawful, meets a condition set out in Schedule 2 to the Act and a condition set out in Schedule 3. These conditions can be found in the advice on the first data protection principle.

The very nature of this type of personal information means that it should only be necessary to obtain this information from an individual and process it in limited circumstances and for specific and explicit purposes which have been clearly explained to the individual concerned.