San Marino Law No. 171, special categories of personal data
Legge 21 dicembre 2018 n. 171, articolo 8 (categorie particolari di dati personali)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 21 December 2018.
A sensitive categories rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Obtain explicit consent or another Article 8(2) exception before capturing or storing a biometric identifier of a person in San Marino; Article 8(1) prohibits biometric processing for unique identification absent one.
- Do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, nor genetic data or data concerning health, sex life or sexual orientation, unless one of the article 8(2) cases applies.
- Where you rely on the not-for-profit body ground, confine the processing to the body's members or regular contacts and do not disclose the data outside it without the data subject's consent.
- Where you rely on the health-care ground, process only by or under the responsibility of a professional bound by an obligation of secrecy.
What it reaches
Excludes recording-derived identifiersNo
Obligation class
Prohibition, Consent, Biometric
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 8(1) prohibits processing personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, and the processing of genetic data, of biometric data for the purpose of uniquely identifying a natural person, and of data concerning health or a natural person's sex life or sexual orientation.
Article 8(2) lifts that prohibition only in the cases it lists, which mirror the General Data Protection Regulation (GDPR)'s: the data subject's explicit consent to one or more specified purposes; obligations and rights in the field of employment, social security and social protection law; the vital interests of the data subject or another person where the data subject is incapable of consenting; processing in the course of the legitimate activities of a foundation, association or other not-for-profit body with a political, philosophical, religious or trade union aim, confined to its members and not disclosed onward without consent; data manifestly made public by the data subject; legal claims and courts acting judicially; substantial public interest; preventive or occupational medicine and the provision of health or social care by or under the responsibility of a professional bound by secrecy; public health; and archiving in the public interest, scientific or historical research or statistics.
Because the prohibition attaches to biometric data processed for unique identification, biometric material derived from an ordinary recording is not carved out of it. Law 171/2018 was approved by the Great and General Council on 12 December 2018 and promulgated by the Captains Regent on 21 December 2018, the date carried in the law's own official title, and it states no separate entry-into-force clause, so that promulgation date is the day these provisions began to bind.
When LexLint raises it
crawls_webtrains_modelsprocesses_biometricsprocesses_voiceserves_minorshandles_health_records
Read the law
English-translation PDF hosted by dataguidance.com, read in full (201,720 characters, not truncated)
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.