Sensitive Personal Data
Section 1 of the Act specifies eight categories of sensitive personal data.
These are data consisting of information as to the Data Subject's:
- racial or ethnic origin
- political opinions
- religious or other beliefs of a similar nature
- trade union membership
- physical or mental health or condition
- sexual life
- the commission or alleged commission by him of an offence
- any proceedings for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings
Compliance with the first data protection principle requires that the processing of sensitive personal data is fair, lawful, meets a condition set out in Schedule 2 to the Act and a condition set out in Schedule 3. These conditions can be found in the advice on the first data protection principle.
The very nature of this type of personal information means that it should only be necessary to obtain this information from an individual and process it in limited circumstances and for specific and explicit purposes which have been clearly explained to the individual concerned.