Types of personal data listed in Article 9(1) GDPR that are considered sensitive and thus require extra protection. Article 9(1) lists data relating to:

• racial or ethnic origin
• political opinions
• religious or philosophical beliefs
• trade union membership
• genetic data
• biometric data
• health
• sex life
• sexual orientation

Where these types of personal data are processed, in addition to an Article 6 lawful basis, an Article 9 condition for processing must be identified.