Skip to main content

Do I need a Data Protection Officer (DPO)?

3. Do your organisation's core activities involve processing on a large scale 'special categories' of personal data, or 'criminal convictions or offences data'?

By 'special categories' we mean personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data about a person's sex life or sexual orientation.