Data relating to an employee’s racial or ethnic origin, political opinions, religious beliefs, health data or trade union membership, which were previously known as ‘sensitive data’ are now known as ‘special categories of data’.

They also include genetic data and biometric data but also have wider grounds for health and healthcare management.

Explicit consent

For these categories of data, explicit consent is required for the processing of this data. Employers must rely on one of the following lawful reasons for obtaining and processing this data:

  • Carrying out employment rights and obligations
  • Protecting the vital interests of the employee or another person
  • Establishing, existing and defending legal claims
  • Promoting equality of treatment provided policies are in place
  • Assessing employees’ working capacity