How do you process sensitive personal data such as sexual orientation and faith?

Many organisations are collecting data on staff and student sexual orientation and faith. This helps ensure that they recruit a diverse work and student body, and that all have a great experience at working and learning in the organisation. But organisations need to know that this data, under the General Data Protection Regulations (GDPR) is classified as ‘special category’ data. ICO have published new guidance on processing this type of data.

The GDPR recognises that some types of personal data are very sensitive and states that data controllers must give it extra protection. Special category data includes information concerning a person’s health, sexual orientation and religious beliefs. The GDPR has more emphasis on explicit consent for special category data.

Due to the possible risks, the Information Commissioners Office (ICO) have published new guidance to help controllers take precautions to protect this data. The guide also explains what explicit consent might mean in practice.

You can download the guidance here