What is the difference between personal and sensitive data?

Personal data is any piece of information that someone can use to identify, with some degree of accuracy, a living person. 

Under certain circumstances, any of the following can be considered personal data: 

  • A name and surname 
  • A home address 
  • An email address 
  • An identification card number 
  • Location data 
  • An Internet Protocol (IP) address 
  • The advertising identifier of your phone 

Sensitive personal data is a specific set of “special categories” that must be treated with extra security. This includes information pertaining to: 

  • Racial or ethnic origin; 
  • Political opinions; 
  • Religious or philosophical beliefs; 
  • Trade union membership; 
  • Genetic data; and 
  • Biometric data (where processed to uniquely identify someone).