Articles 6 and 8 of the Jordan PDPL establish enhanced protections for Sensitive Personal Data and children's data. (1) Article 6 Sensitive Personal Data Categories: (a) Racial or ethnic origin; (b) Political opinion or party membership; (c) Religious beliefs; (d) Philosophical beliefs; (e) Trade union membership; (f) Physical or mental health condition (medical records + treatments + diagnoses + medications); (g) Genetic data (DNA + heritability + family genetic conditions); (h) Biometric data (fingerprint + facial recognition + iris + voice + behavioural); (i) Sexual life + sexual orientation; (j) Criminal convictions + offences + arrests; (k) Any other category Council specifies through regulation. (2) Sensitive Data Processing Conditions per Article 6 (PROHIBITED unless one applies): (a) Explicit Consent of data subject (heightened consent standard - specific to sensitive data + informed of consequences); (b) Employment law obligations - occupational health + welfare + workplace safety; (c) Vital interests of data subject or another where unable to consent; (d) Non-profit body for own membership (political party + religious organisation + trade union + philosophical society); (e) Manifestly made public by data subject; (f) Legal claims + judicial proceedings + court orders; (g) Substantial public interest with appropriate safeguards (proportionate to objective + essence of rights respected); (h) Preventive Medicine + Occupational Medicine + Health/Social Care under professional secrecy; (i) Public Interest in Public Health (epidemic + outbreak + national health); (j) Archive in public interest + scientific or historical research + statistics with appropriate safeguards. (3) Heightened Consent Standard per Article 6: (a) Explicit affirmation (not implicit or default); (b) Specific to sensitive data category; (c) Informed of risks + consequences; (d) Clear affirmative action; (e) Easily withdrawable; (f) Documented + audit trail; (g) Reaffirmation for new purposes. (4) Genetic Data Specific Considerations: (a) Heritability affecting family members; (b) Bioethics + Jordan Bioethics Committee + Hashemite Foundation; (c) Genetic testing + ancestry services + research biobanks; (d) Medical genetics + cancer screening + pharmacogenomics; (e) Insurance considerations + non-discrimination. (5) Biometric Data Specific Considerations: (a) National ID Card + Sanad National Digital ID + biometric template; (b) Border control + e-Visa + Department of Civil Status; (c) Facial recognition + CCTV regulation; (d) Banking biometric authentication; (e) Mobile device biometrics; (f) Non-revocable nature concerns. (6) Health Data Specific Considerations: (a) Physical or mental health; (b) Medical records + diagnoses + treatments + medications; (c) Jordan Ministry of Health + Royal Medical Services + private healthcare; (d) Telemedicine emerging post-COVID; (e) Insurance health data overlap; (f) Mental health stigma sensitivity; (g) JCI Joint Commission International accreditation for hospitals. (7) Article 8 Children's Data Enhanced Protections: (a) Child defined as person under 16 by default per Article 8; (b) Parental + guardian consent for processing of children's personal data; (c) Age verification required where service directed to children; (d) Reasonable steps to verify parental consent (per Council regulation); (e) Child-friendly Privacy Notice; (f) NO behavioural advertising or profiling for marketing to children; (g) Prohibition on detrimental processing; (h) Schools + education sector specific provisions + Ministry of Education guidance. (8) Schools + Education Sector: (a) Ministry of Education guidance under PDPL; (b) Education records + school-based data; (c) Tawjihi General Secondary Education Certificate Examination + results data; (d) University admissions + UJ University of Jordan + JU Jordan University of Science and Technology; (e) Edu-tech vendor due diligence; (f) Special needs education data; (g) Refugee education (UNHCR coordination + Syrian + Palestinian + Iraqi). (9) Public Sector + Sensitive Data: (a) Anti-discrimination obligations under Jordan Constitution; (b) Census + statistical processing safeguards; (c) Public health emergency processing; (d) Voter registration + Independent Election Commission; (e) Health insurance + Social Security Corporation. (10) Penalties for Sensitive Data + Children Violations: (a) Article 23 heightened penalties for sensitive data; (b) Council escalation procedures; (c) Public naming; (d) License revocation; (e) Criminal liability for willful violations. Coordinates with EU GDPR Articles 8 + 9 + UAE PDPL + Saudi PDPL + Convention 108+ Article 6 + Jordan Constitution + Code of Personal Status + Sharia law considerations + UN Convention on Rights of the Child (Jordan ratified 1991) + UNHCR coordination + Ministry of Education + Ministry of Health + Royal Medical Services + JCI + Bioethics Committee + Jordan Universities + Tawjihi + Sanad National Digital ID + Department of Civil Status + Telecommunications Regulatory Commission + Independent Election Commission. Jordan PDPL Sensitive Data + Children + Articles 6 + 8 apply.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.