AndorraLQPD, special categories, children and criminal-offence data
Llei 29/2021, arts. 8-10 (special categories, children and criminal-offence data)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 17 May 2022.
A sensitive categories rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union affiliation, or process genetic data, biometric data used to uniquely identify a person, health data, or data about sex life or sexual orientation, unless a listed Article 9(2) exception applies, most commonly the data subject's explicit consent.
- Confine any processing of personal data about a person's criminal convictions or offences, or related security measures, to what is strictly necessary and authorised by law or supervised by a public authority with adequate safeguards.
- Treat sixteen as the age at which a minor may consent to an information-society service directly, and obtain or verify consent or authorisation from a legal representative below that age, using available technology to confirm it.
- Treat an identifier your system derives from a photograph of a person in Andorra, such as a faceprint, as covered biometric data under Article 4(17); the definition names facial images, dactyloscopic data and iris patterns as examples and excludes nothing that is recording-derived.
What it reaches
Excludes recording-derived identifiersNo
Obligation class
Prohibition, Consent, Biometric, Age verification
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 9(1) prohibits processing personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union affiliation, and processing genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning sex life or sexual orientation.
Article 9(2) lifts that prohibition only under the listed circumstances, running from the data subject's explicit consent through employment and social security law, vital interests where the data subject is a person receiving support measures for exercising legal capacity, the legitimate activities of a non-profit body processing only its own members' data, data manifestly made public by the data subject, legal claims, essential public interest, preventive or occupational medicine, public health, and archiving, scientific, historical or statistical purposes.
Article 9(3) lets sectoral rules add requirements, conditions or limitations on the security and confidentiality of processing special categories of personal data. Article 4(17) defines biometric data as personal data obtained from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person that allow or confirm that person's unique identification, naming facial images, dactyloscopic data and iris patterns as examples.
Article 10 confines processing of personal data about criminal convictions and offences, or related security measures, to what is strictly necessary and authorised by law or supervised by public authorities with adequate safeguards, and keeps any comprehensive register of such data solely under the competent public authorities' control.
Article 8 sets the threshold for a minor's own consent to an information-society service at sixteen years, requiring a legal representative's consent or authorisation below that age and a controller's verification of that representative consent using available technology.
Whether a voiceprint falls inside Article 9's special-category restriction is not established by the law's own text: the biometric-data definition's core clause covers behavioural characteristics used for unique identification, but its illustrative examples name facial images, dactyloscopic data and iris patterns and do not name voice.
When LexLint raises it
serves_minorshandles_health_recordsprocesses_biometrics
Read the law
Consolidated statute text at portaljuridicandorra.ad
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.