A university lecturer asks students to identify which category of personal data receives the highest level of protection under GDPR. Which answer is correct?
- A.Special categories under Article 9: health data, genetic data, biometric data for identification, racial/ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, and data concerning sex life or sexual orientation
- B.Financial data such as bank account numbers and credit scores
- C.Contact information including home addresses and telephone numbers
- D.All personal data receives equal protection under GDPR - Article 9 only governs consent requirements
Why A is correct
GDPR Article 9 designates specific categories as deserving heightened protection due to their sensitivity and the particular harm their processing can cause. These are: racial/ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data processed for unique identification, health data, sex life, and sexual orientation. Financial data and contact information are ordinary personal data. Article 9 imposes additional conditions for processing these categories, not merely consent rules.
Know someone studying for AI Security Fundamentals? Send them this one.