Sensitive data

Sensitive data is a special category of personal data.
This is information which reveals the alleged racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning the sexual life or sexual orientation of a natural person.

GDPR prohibits collecting or using this data, except, in particular, in the following cases:
if the data subject has given their express consent (active, explicit and preferably written approach, which must be free, specific, and informed);
if the information is clearly made public by the data subject;
if they are necessary to safeguard human life;
if their use is justified by the public interest and authorised by the CNIL;
if they concern the members or adherents of a political, religious, philosophical, political or union association or organizsation.