Processing sensitive data (racial or ethnic origin, religious, philosophical and moral beliefs, union or political affiliation, health, sexual preference or orientation, genetic data, biometric data for unique identification, and any data whose misuse could cause discrimination or serious risk) is prohibited unless one of eleven grounds applies: free, informed, unambiguous consent not imposed on the data subject; data manifestly made public; labour and social security obligations with safeguards; vital interests where consent cannot be given; members of non-profit political, philosophical, religious or union bodies without outside disclosure; legal claims or courts; public health by the competent authority with professional secrecy; preventive or occupational medicine, diagnosis, care or health system management by professionals bound by secrecy; humanitarian assistance in natural disasters; archiving, research or statistics with effective anonymisation; or necessary and proportionate sharing by State authorities for their functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.