What is personal data?
Personal data is information that can be used to identify a person. Some personal data is considered more sensitive and may only be processed in limited circumstances.
Why and how should I assess this?
It is essential to know the type of personal data and the categories of data subjects that the processor will process on your behalf. Here are some things to look after when you assess personal data:
Sensitive data
The special categories of personal data, listed by article 9 GDPR, are personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data (where used for identification purposes); data concerning health; data concerning a person’s sex life; and data concerning a person’s sexual orientation.
Security
You must ensure that there are technical and organizational measures to ensure the security of the processing. Security is especially relevant when you share and process sensitive data.