Personal data · Legal glossary
Sensitive personal dataIn Arabic: البيانات الحساسة
Definition
Sensitive personal data are a class of personal data subject to stricter limits on collection and processing. Depending on the text, the class includes ethnic origin, religious belief, health data and biometric data.
How it varies across the GCC
Item 11 of article 1 of the Saudi Personal Data Protection Law defines them. Article 1 of UAE Federal Decree-Law No. 45 of 2021 defines “sensitive personal data” and includes biometric data among what that definition covers.
The rules that apply to a specific matter depend on the state, any free zone involved and the current text of the law, so check the official source before relying on them.
Compare the GCC laws side by side in our data protection guideSources
Official texts for the points on this page. General information, not legal advice. An article number is cited only where it was verified.
- Saudi Personal Data Protection Law, art. 1https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1
- UAE Federal Decree-Law No. 45 of 2021, art. 1https://uaelegislation.gov.ae/ar/legislations/1972