Our use of cookies

We use necessary cookies to make our site work. We would also like to set some optional cookies. We won't set these optional cookies unless you enable them. Please choose whether this site may use optional cookies by selecting 'On' or 'Off' for each category below. Using this tool will set a cookie on your device to remember your preferences.

For more detailed information about the cookies we use, see our cookie notice cookie notice.

Necessary cookies

Necessary cookies enable core functionality such as security, network management, and accessibility . You may disable these by changing your browser settings, but this may affect how the website functions.

Performance cookies

We'd like to set cookies to help us to improve our website by collecting and reporting information on how you use it. For more information on these cookies, please see our cookie notice. The cookies collect information in an anonymous form. Data is only used in aggregate.

Functionality cookies

We'd like to set cookies to provide you with a better customer experience. For more information on these cookies, please see our cookie notice.

Law guide: Property

See how we helped Michael

"Fantastic! The legal document I used was so comprehensive and easy to complete. It is very reassuring to know my business now has this level of protection"

Michael S, London

Special categories of personal data

Special categories of personal data

Contents

Special rules apply for processing sensitive data (now called Special Categories of Data) and criminal convictions and offences. Special Categories of Data include information on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health (physical or mental), sex life, sexual orientation, genetic data and biometric data used to identify a specific individual.

Lawful processing

To lawfully process special categories of data, you must have:

  • A lawful ground for being able to process the data
  • An additional ground to process it under GDPR rules
  • The following in place:
    • A policy that deals with how this data will be processed (such as in a data protection/privacy standards policy)
    • A policy that deals with how long you will keep all the personal data you have processed and when it is likely to be deleted.

You must also ensure that these policies are maintained, reviewed and updated when necessary, from the date processing begins up to 6 months after it ends, and you keep a record of the processing activities.

It is unlikely that you will process information about criminal convictions and offences but will need to use sensitive personal data when undertaking a right to rent check.

Copyright © 2019 Epoq Group Ltd. All trademarks acknowledged, all rights reserved

This website is operated by Epoq Legal Ltd, company number 3707955, whose registered office is at 2 Imperial Place, Maxwell Road, Borehamwood, Hertfordshire, WD6 1JN. Epoq Legal Ltd is authorised and regulated by the Solicitors Regulation Authority (SRA number 645296).