Sensitive, genetic and biometric data under the LPrD

The LPrD revision extends the sensitive data category to include genetic and biometric data. These data require enhanced protection because their misuse presents a high risk to the individuals concerned.

Biometric data, such as fingerprints or facial recognition data, and genetic data are now explicitly classified as sensitive. For a public entity, this means stricter legal bases, enhanced security measures, and in most cases a prior impact assessment. Existing processing activities involving this type of data must be reassessed in light of the revision.