In this exercise, you will gain a step-by-step overview of the data protection status of your project organisation.
Article 9 of the GDPR defines what must be taken into account when "processing special categories of personal data". This includes data revealing "racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership", as well as genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation. The processing of such data is initially prohibited under the GDPR and is only possible under very strict conditions.