Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are special categories, and processing them is prohibited. Since the 2024 amendment (in force 1 June 2024, replacing the former split between health and sexual life data and the rest) it is permitted only where the data subject gives explicit consent; a law explicitly provides for it; it protects the life or bodily integrity of a person unable to consent; the data subject made the data public and processing matches that intention; it is necessary to establish, exercise or protect a right; it is necessary for public health, preventive medicine, diagnosis, treatment and care, or planning, managing and financing health services, by persons under a confidentiality duty or competent public bodies; it is necessary for legal obligations in employment, occupational health and safety, social security, social services and social assistance; or it concerns current or former members and affiliates of, or people in regular contact with, political, philosophical, religious or trade union foundations, associations and non-profits, within their legislation and field and without disclosure to third parties. Adequate measures set by the Board must also be applied (Board decision 2018/10 of 31 January 2018).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.