In its Article 9 the GDPR categorizes some types of personal data as “sensitive”. Of these below which are considered sensitive?

According to Article 9(1) of the General Data Protection Regulation (GDPR), certain types of personal data are classified as "special categories" (often referred to as sensitive data) and are subject to a higher level of protection. This list explicitly includes "data concerning health." The result of a medical examination directly reveals information about a person's physical or mental health status, thus qualifying as data concerning health under the GDPR's definition in Article 4(15). Therefore, it is considered sensitive personal data.

A. Date of birth is considered personal data but is not listed as a special category in Article 9 of the GDPR.
B. A person's home address is personal data, but it does not fall into the specific sensitive categories defined by Article 9.
C. Supporting a soccer team is a personal preference and is not explicitly categorized as sensitive data, unlike political or philosophical beliefs.

1. Regulation (EU) 2016/679 (General Data Protection Regulation), Official Journal of the European Union, L 119/1.

Article 9(1): "Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited."

Article 4(15): Defines 'data concerning health' as "personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status". This directly covers the "result of a medical examination."