Article 9(1) GDPR sets out the special categories of personal data:
".. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation..."
None of the standard WebCollect fields fall within the
special categories of personal data. However, you may want
to consider whether any of the data that you collect via forms
comes within those categories.
Lawful bases for processing special categories of data
The lawful bases for processing special categories of data are set out in Article 9(2) GDPR. The basis that is most likely to be relevant for the majority of organisations using WebCollect is Explicit Consent in article 9(2)(a):
9(2)(a) – Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law
Click here for information on how to use WebCollect forms to obtain consent.
