GDPR Article 9(1): special categories of personal data (Regulation (EU) 2016/679, Art 9(1))
Support tickets, chat and call recordings can mention health, union membership, beliefs or biometric voice data. That content is prohibited unless an Article 9(2) exception applies, so it has to be removed or excluded before a licence.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited.”
Where it was read
Also read from the same source
- GDPR Article 5(1)(b): purpose limitation (Regulation (EU) 2016/679, Art 5(1)(b))
- GDPR Article 6(1)(f): legitimate interests as a lawful basis (Regulation (EU) 2016/679, Art 6(1)(f))
- GDPR Article 6(4): compatibility test for a new purpose (Regulation (EU) 2016/679, Art 6(4))
- GDPR Recital 50: further processing and the legal basis (Regulation (EU) 2016/679, recital 50)
- GDPR Article 13(3): telling people before a new purpose (Regulation (EU) 2016/679, Art 13(3))
- GDPR Article 14(5)(b): disproportionate effort (Regulation (EU) 2016/679, Art 14(5)(b))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides