Law on the Protection of Personal Data, sensitive personal data

Article 6 bars collecting or processing data revealing political, philosophical or religious opinions, trade union membership, or health or sexual life data without the data subject's express consent, though a religious, philosophical, political or trade union body may keep an automated membership register free of that bar, and the Commission may allow a further exception for reasons of public interest.

Article 7 lifts the article 6 bar where the data subject has expressly consented and consent may lawfully remove the bar, where processing safeguards a human life the data subject cannot consent to protect, where a non profit, religious, philosophical or trade union body processes data limited to its own members and regular contacts, where the processing establishes, exercises or defends a right in court, or where the processing serves individual therapeutic or medical follow up or health research.

Article 8 restricts processing of data on offenses, convictions or security measures to courts, public authorities and bodies managing a public service acting within their legal duties, legal auxiliaries for the strict needs of the missions the law entrusts to them, and other legal persons for the strict needs of managing disputes over offenses of which they were the victim.

Articles 43(b) to (d) require the Commission's prior authorization and control before processing biometric data needed to verify a person's identity, data on a person's health or condition, or data on offenses and convictions, because of the particular risk such processing poses to privacy and fundamental rights.