Personal Data vs Sensitive Data | Webster University

GDPR Quiz: Personal Data vs. Sensitive Data

Do you know the difference between personal data and sensitive data according to the General Data Protection Regulation (GDPR)? Test your knowledge below by determining whether the following examples are personal or sensitive data:

a. Name
b. Sexual orientation
c. Trade union association
d. Date of birth
e. Blood Type
f. IP Address



a-personal data
b-sensitive data
c-sensitive data
d-personal data
e-sensitive date
f-personal data

Here is how these terms are defined under GDPR:

Personal Data: Any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data. Personal data that has been de-identified, encrypted or pseudonymised but can be used to re-identify a person remains personal data and falls within the scope of the law.

Sensitive Data: Data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation.

Learn more about GDPR and Webster resources supporting it here.