GDPR Article 9 — Processing of special categories of personal data

Article 9(1) — General prohibition

Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for unique identification, health data, or data concerning sex life or sexual orientation shall be prohibited.

Article 9(2) — Exceptions to the prohibition

The prohibition does not apply where an exception applies, including explicit consent; employment, social-security, or social-protection obligations; vital interests; eligible not-for-profit activities; manifestly public data; legal claims; substantial public interest; health or social care; public health; or research, statistics, and public archives with appropriate safeguards.

Article 9(3) — Professional secrecy

Article 9(1) data may be processed for Article 9(2)(h) purposes when processed by or under the responsibility of a professional subject to an obligation of secrecy, or another person subject to an equivalent obligation.

Article 9(4) — Further Member State conditions

Member States may maintain or introduce further conditions, including limitations, regarding genetic, biometric, or health data.