gdpr: classification of a psychiatric report
<p>I'm following a job-related course regarding data protection and the GDPR (European Union, I'm located in Italy). My background is not in law.</p>
<p>I was puzzled whether a psychiatric report (&quot;perizia psichiatrica&quot;, a document with legal purposes) falls in the sensitive data category. The course says it does not [edit: I double-checked, and the question was intentionally unclear, so probably that was the reason of the confusion], but I also read that &quot;Health data&quot; is indeed sensitive (<a href="https://www.gdpreu.org/the-regulation/key-concepts/special-categories-personal-data/" rel="nofollow noreferrer">https://www.gdpreu.org/the-regulation/key-concepts/special-categories-personal-data/</a>).</p>
<p>What is the reason behind this apparent paradox?</p>

<h2>Its special personal information</h2>
<p><em>The <a href="https://gdpr-info.eu/art-9-gdpr/" rel="noreferrer">GDPR</a> uses “special” not “sensitive”.</em></p>
<blockquote>
<p>Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, <strong>data concerning health</strong> or data concerning a natural person’s sex life or sexual orientation shall be prohibited.</p>
</blockquote>

gdpr