Skip to content

Genetic Data

What is Genetic Data?

Personal data relating to the inherited or acquired genetic characteristics of a natural person, which gives unique information about the physiology or health of that person. Classified as special category data under GDPR.

Privacy

Each of these is named in at least one of the same controls as genetic data. The number is how many controls name both.

What the standards actually require on genetic data

Requirements naming genetic data across 6 standards, quoted from the control text.

Processing genetic data to calculate disease probability or other health aspects in the context of concluding or performing life-insurance and survival-clause contracts is prohibited; the data subject's consent cannot lift this prohibition.

HR-GDPR-Art.20 · Prohibition on Genetic Data Processing for Insurance

Permits processing of health and genetic data for scientific or statistical purposes subject to safeguards, including restrictions on further use and disclosure.

DK-502-§10 · Health and genetic data for research and statistics

Georgia DPL Scope + applicability + 2023 GDPR-aligned amendments. SCOPE: applies to natural-person personal data processing in Georgia + (post-2023 amendments) EXTRATERRITORIAL APPLICATION to processing related to offering of goods or services to data subjects...

GeDPL-Scope-Defs-2023Amendments · Scope, Applicability, Definitions and 2023 GDPR-Alignment Amendments

Chapter II (Articles 8-13) Conditions for Processing. Article 8 Principles Relating to Processing - GDPR Article 5 principles transposed: lawfulness + fairness + transparency; purpose limitation; data minimisation; accuracy; storage limitation;

ICELAND-Act90-Chap2-Principles-LawfulBasis-Consent-Sensitive-Criminal · Iceland Act 90/2018 - Chapter II Principles + Lawful Basis + Consent + Special Categories + Criminal Data (Articles 8-13)

Processing of sensitive data (philosophical, political beliefs, party affiliation, religion, private life, ethnicity, health, sexual life, genetic data) requires explicit consent or APD authorisation.

AO-PDPL-4 · Sensitive Data

Article 4 imposes specific requirements for IVDs intended for use as genetic tests on individuals. Member States ensure that the use of a genetic test is accompanied by appropriate information about the nature, the significance and the implications of the gene...

IVDR-Art.4 · Genetic information, counselling and informed consent for genetic tests (Article 4)

Questions people ask about genetic data

What is Genetic Data?
Personal data relating to the inherited or acquired genetic characteristics of a natural person, which gives unique information about the physiology or health of that person. Classified as special category data under GDPR.
Why is Genetic Data important for compliance?
Genetic Data is a key concept in Privacy. Understanding genetic data helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Genetic Data?
Genetic Data appears in the requirement text of Act on the Implementation of the General Data Protection Regulation (OG 42/2018), Danish Data Protection Act (Databeskyttelsesloven), Georgia Law on Personal Data Protection (2012), Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018), Angola Personal Data Protection Law (Law No. 22/11). Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Genetic Data?
Explore our compliance framework pages to see how genetic data applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Genetic Data applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.