← Back to glossary
⚠️

Sensitive Personal Data

Privacy

Data Minimization Biometric Data Personal Data

Higher-risk personal data categories (e.g., health, biometrics, precise location) requiring enhanced safeguards.

Definition

Sensitive personal data refers to categories that increase risk if processed or exposed. Laws define these differently (e.g., “special categories” under GDPR). Organizations should apply stronger controls, stricter access, and clearer legal basis.

In plain English Higher-risk personal data categories (e.g., health, biometrics, precise location) requiring enhanced safeguards.

Why this matters

Why it matters: Exposure can cause severe harm; limiting collection and processing reduces risk.

Example

Example: Restrict access, encrypt at rest/in transit, minimize retention, and separate sensitive datasets from general analytics.