If the personal data you collect includes information on an individual’s health, race, sexual orientation, religion, political beliefs, or trade union membership, it is considered sensitive. Your company can only process this data under specific conditions and you may need to implement additional safeguards, such as encryption.