General Data Protection Regulation (GDPR)

8.

Special Categories and Specific Processing Situations

8.1.

Processing of Special Categories of Personal Data

8.1.1.

General Prohibition

8.1.1.1.

Article 9 Prohibition

8.1.1.2.

Enhanced Protection Rationale

8.1.2.

Exceptions to Prohibition

8.1.2.1.

Explicit Consent

8.1.2.1.1.

Higher Consent Standard

8.1.2.1.2.

Specific and Informed

8.1.2.1.3.

Withdrawal Rights

8.1.2.2.

Employment and Social Security Law

8.1.2.2.1.

Authorized by Law

8.1.2.2.2.

Appropriate Safeguards

8.1.2.2.3.

Collective Agreements

8.1.2.3.

Vital Interests

8.1.2.3.1.

Data Subject Incapacity

8.1.2.3.2.

Physical or Legal Incapacity

8.1.2.4.

Non-Profit Bodies

8.1.2.4.1.

Political, Philosophical, Religious, Trade Union

8.1.2.4.2.

Members and Former Members

8.1.2.4.3.

Regular Contact Persons

8.1.2.4.4.

No Disclosure Without Consent

8.1.2.5.

Publicly Available Data

8.1.2.5.1.

Data Subject Publication

8.1.2.5.2.

8.1.2.6.

8.1.2.6.1.

Establishment, Exercise, Defense

8.1.2.6.2.

Court Proceedings

8.1.2.6.3.

Administrative Procedures

8.1.2.7.

Substantial Public Interest

8.1.2.7.1.

Authorized by Law

8.1.2.7.2.

Proportionate to Aim

8.1.2.7.3.

Respect for Essence of Rights

8.1.2.7.4.

Appropriate Safeguards

8.1.2.8.

Healthcare and Public Health

8.1.2.8.1.

Preventive or Occupational Medicine

8.1.2.8.2.

Medical Diagnosis

8.1.2.8.3.

Health or Social Care

8.1.2.8.4.

Public Health Interest

8.1.2.8.5.

Professional Secrecy

8.1.2.9.

Archiving, Research, and Statistics

8.1.2.9.1.

Public Interest

8.1.2.9.2.

Scientific or Historical Research

8.1.2.9.3.

Statistical Purposes

8.1.2.9.4.

Appropriate Safeguards

8.1.3.

Additional Safeguards

8.1.3.1.

Technical Measures

8.1.3.2.

Organisational Measures

8.1.3.3.

Access Restrictions

8.2.

Processing of Criminal Convictions and Offences Data

8.2.1.

Authorisation by Law Requirement

8.2.1.1.

Official Authority Control

8.2.1.2.

Legal Framework

8.2.1.3.

Appropriate Safeguards

8.2.2.

Safeguards for Processing

8.2.2.1.

Access Controls

8.2.2.2.

8.2.2.3.

8.2.2.4.

Regular Reviews

8.2.3.

Private Sector Limitations

8.2.3.1.

Restricted Processing

8.2.3.2.

Specific Authorization

8.3.

Processing and Freedom of Expression

8.3.1.

Journalistic Purposes

8.3.1.1.

Editorial Independence

8.3.1.2.

Public Interest

8.3.1.3.

Source Protection

8.3.2.

Academic Purposes

8.3.2.1.

Research Freedom

8.3.2.2.

Scientific Inquiry

8.3.2.3.

Educational Activities

8.3.3.

Artistic and Literary Purposes

8.3.3.1.

Creative Expression

8.3.3.2.

Cultural Activities

8.3.3.3.

Artistic Freedom

8.3.4.

Balancing Rights and Freedoms

8.3.4.1.

Fundamental Rights Balance

8.3.4.2.

Proportionality Assessment

8.3.4.3.

Necessary Exemptions

8.3.5.

Member State Derogations

8.3.5.1.

National Law Provisions

8.3.5.2.

Reconciliation of Rights

8.4.

Processing in Employment Context

8.4.1.

Employee Monitoring

8.4.1.1.

Workplace Surveillance

8.4.1.2.

Performance Monitoring

8.4.1.3.

Communication Monitoring

8.4.1.4.

Location Tracking

8.4.2.

Data Protection in HR Practices

8.4.2.1.

Recruitment Processes

8.4.2.2.

Performance Management

8.4.2.3.

Disciplinary Procedures

8.4.2.4.

Health and Safety

8.4.3.

Employee Rights

8.4.3.1.

Information Rights

8.4.3.2.

8.4.3.3.

Objection Rights

8.4.4.

National Law Variations

8.4.4.1.

Employment Law Differences

8.4.4.2.

Collective Bargaining

8.4.4.3.

Works Council Rights

8.4.5.

Consent in Employment

8.4.5.1.

Power Imbalance

8.4.5.2.

Alternative Legal Bases

8.4.5.3.

Voluntary Nature Assessment

8.5.

Processing for Archiving, Research, and Statistics

8.5.1.

Public Interest Archiving

8.5.1.1.

Historical Value

8.5.1.2.

Cultural Heritage

8.5.1.3.

Permanent Preservation

8.5.2.

Scientific Research Purposes

8.5.2.1.

Broad Research Definition

8.5.2.2.

Technological Development

8.5.2.3.

Fundamental Research

8.5.2.4.

Applied Research

8.5.3.

Historical Research Purposes

8.5.3.1.

Historical Documentation

8.5.3.2.

Genealogical Research

8.5.3.3.

Biographical Research

8.5.4.

Statistical Purposes

8.5.4.1.

Official Statistics

8.5.4.2.

Survey Research

8.5.4.3.

Population Studies

8.5.5.

Safeguards and Derogations

8.5.5.1.

Technical Safeguards

8.5.5.1.1.

Pseudonymisation

8.5.5.1.2.

8.5.5.1.3.

Access Controls

8.5.5.2.

Organisational Safeguards

8.5.5.2.1.

8.5.5.2.2.

Confidentiality Obligations

8.5.5.2.3.

Audit Procedures

8.5.5.3.

Data Minimisation

8.5.5.3.1.

Purpose Limitation

8.5.5.3.2.

Proportionality

8.5.5.4.

Rights Restrictions

8.5.5.4.1.

Access Right Limitations

8.5.5.4.2.

Rectification Limitations

8.5.5.4.3.

Portability Limitations

8.5.6.

Public Interest Considerations

8.5.6.1.

Societal Benefits

8.5.6.2.

Knowledge Advancement

8.5.6.3.

Cultural Preservation

8.5.6.4.

Democratic Accountability

Previous

7. Enforcement, Remedies, and Penalties

Go to top

Back to Start

1. Foundations of GDPR