Are you Processing Special Category Personal Data Without Knowing It?
What is special category data under the GDPR?What does Guidance from the ICO say about inferring special category data?Are there any judgements which help us understand this issue?How could you collect special category data inadvertently and how can you avoid it?A final thoughtHow URM can HelpDue to its sensitive nature, special category data poses an increased risk to the rights and freedoms of data subjects if it is processed unlawfully, lost, corrupted or disclosed without authorisation. As such, it requires additional protection and care to manage. Like all personal data, special category data should only be processed when necessary, and should never be collected ‘just in case’ or if you could achieve your aims without it. But even if you decide not to process special category data, might you be doing so without knowing it?What is special category data under the GDPR?The UK General Data Protection Regulation (GDPR) classifies the following types of personal data as potentially more...