What is Special Category Data?
Special category data (sometimes called sensitive personal data) is personal information that is especially private and needs stronger legal and practical protections. Collecting or processing it usually requires a clear legal basis and extra safeguards.
Special category data covers types of personal information that are considered particularly sensitive because misuse could harm a person’s privacy, dignity or safety. Common examples include racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic and biometric data used to identify someone, health information, and data about a person’s sex life or sexual orientation. Many privacy laws (for example the EU/UK GDPR) require organisations to meet stricter conditions before they can collect, store or share this sort of data — often needing explicit consent, a clear legal justification, purpose limitation, and additional technical and organisational safeguards such as pseudonymisation, access controls and short retention periods.
Usage example
When creating a school wellbeing survey, the project lead flags questions about long-term health conditions and disability as special category data. They mark those questions optional, add explicit consent text that will be displayed in every supported language, store responses separately with limited access, and document the legal basis for processing.
Practical application
In practice, recognising special category data changes how you design, translate, publish and store a survey. You should only ask sensitive questions when they are necessary, make them optional, explain clearly (in every language offered) why the data is needed and how it will be used, get explicit consent where required, and apply stronger security and retention controls. For Hearo users this means using the platform’s translation and review workflow to ensure consent wording and safeguards are accurate in each language, and using response translation and access controls so only authorised staff can read sensitive answers.
FAQ
Is a person’s preferred language or nationality special category data?
No — details like preferred language or nationality are generally treated as ordinary personal data, not special category data. However, questions that reveal ethnic origin, immigration status or other sensitive attributes may fall into the special category definition and should be treated with extra care.
Do I always need explicit consent to collect special category data?
Not always. Many laws accept other legal bases in limited circumstances (for example vital interests, employment law, or public health reasons), but where consent is used it must be explicit and informed. If you’re unsure, favour minimizing collection, making questions optional, and documenting your legal basis and safeguards.
How should we handle translations of consent and sensitive questions?
Translate consent and sensitive question wording carefully and verify translations before publishing. Use Hearo’s review workflow so translated consent language is accurate and culturally appropriate in each language, and allow participants to flag wording that feels wrong. Accurate translation is essential to ensure consent is valid and participants understand the risks and protections.
What should we do if someone refuses to answer a special category question?
Make sensitive questions optional and never penalise respondents for skipping them. If the question is essential, explain why and offer alternatives; otherwise proceed without the data. Keep responses anonymous or pseudonymised when possible to reduce risk.