A marketing lead insists that under the GDPR, 'sensitive data' alwa…

Question

A marketing lead insists that under the GDPR, 'sensitive data' always means passwords and other secrets. Which correction best reflects EU data protection terminology?

Accepted Answer

Special-category data under Article 9 refers to specific sensitive traits such as health, biometrics used for identification, or political opinions—not secrecy alone. — Secret is not the same as special-category. GDPR’s Article 9 list is about particular traits—health, biometrics for ID, politics, and similar—not about anything you keep in a locked drawer. Passwords matter for security, but they are not that list.

Answer

Sensitive data under the GDPR means any field marked confidential in a spreadsheet, including passwords.

Answer

Passwords are the only Article 9 special category recognised across Member States.

Answer

Special categories cover every piece of personal data that a company prefers not to publish.

A marketing lead insists that under the GDPR, 'sensitive data' always means passwords and other secrets. Which correction best reflects EU data protection terminology?

Short Explanation

Full Explanation