Special category data is personal data that UK GDPR treats as more sensitive and protects more strictly. Using it requires not only a lawful basis but also an additional condition under the law.
What it covers
- Racial or ethnic origin.
- Political opinions, religious or philosophical beliefs.
- Trade union membership.
- Genetic and biometric data used to identify someone.
- Health data, and data about sex life or sexual orientation.
Why it gets extra protection
Misuse of this kind of data can cause greater harm, so the law sets a higher bar. Organisations must identify a specific extra condition before processing it, and apply stronger safeguards.
Does Credicorp process it?
As a business lender to companies, we do not normally need special category data, and we avoid collecting it. In rare cases it might arise, for example if you choose to tell us about a health-related circumstance affecting the business. Where that happens, we handle it under the stricter rules and keep it to a minimum. Note that data about criminal offences is handled under separate rules, not as special category data.
See also: Glossary: what is a data controller?, What are my rights under UK GDPR? and Arrears (glossary).