Genetic Data
What is Genetic Data?
Personal data relating to the inherited or acquired genetic characteristics of a natural person, which gives unique information about the physiology or health of that person. Classified as special category data under GDPR.
Terms that appear alongside genetic data
Each of these is named in at least one of the same controls as genetic data. The number is how many controls name both.
- consent 32 shared controls
- biometric data 27 shared controls
- gdpr 21 shared controls
- health data 20 shared controls
- data subject 18 shared controls
- sensitive personal data 13 shared controls
- age verification 10 shared controls
- lawful basis 8 shared controls
Frameworks that govern genetic data
What the standards actually require on genetic data
Requirements naming genetic data across 6 standards, quoted from the control text.
Under GDPR art. 9(2)(g), genetic data may be processed concerning the person the genetic data were collected from (28(1)). In other cases, under GDPR art.
netherlands-gdpr-implementation-act-uavg-uitvoeringswet-avg-2018::28 · Art. 28 Process genetic data only about the person it was obtained from, or on the strict research or medical grounds →Access to health and genetic data follows the need-to-know principle; processing under GDPR Article 9(2)(h) and (i) must be done by a professional bound by secrecy or another person under a confidentiality duty with adequate information security;
portugal-law-no-58-2019-data-protection-implementation-act::29 · Article 29 Health and genetic data: need to know, secrecy and security →Biometric data (anatomical and physiological features) and genetic data may be processed to identify a subject only with that subject's consent, save for international treaties, justice, enforcement proceedings and other cases in legislation;
uzbekistan-law-on-personal-data-no-zru-547::ZRU547-26 · Use biometric and genetic data for identification only with consent, and store it outside systems only on secured media →Processing genetic data to calculate disease probability or other health aspects in the context of concluding or performing life-insurance and survival-clause contracts is prohibited; the data subject's consent cannot lift this prohibition.
HR-GDPR-Art.20 · Prohibition on Genetic Data Processing for Insurance →Permits processing of health and genetic data for scientific or statistical purposes subject to safeguards, including restrictions on further use and disclosure.
DK-502-§10 · Health and genetic data for research and statistics →Processing genetic data for health and life insurance purposes is prohibited (a measure under Article 9(4) GDPR). Commentary on HDPA Opinion 1/2020 reports that the Authority reads the prohibition as extending to the employment context.
greece-law-46242019-hellenic-data-protection-authority-hdpa-implementation-act::Art.23 · Article 23: no processing of genetic data for health or life insurance →Questions people ask about genetic data
What is Genetic Data?
Why is Genetic Data important for compliance?
Which compliance frameworks address Genetic Data?
Where can I learn more about Genetic Data?
See how Genetic Data applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.