Privacy, data protection & cybersecurity compliance · Core
Sensitive personal data
Also called: special-category data, sensitive information
ELI5
Personal data subject to heightened protection under applicable law.
Used in conversation
“Do not describe sensitive personal data as agreed until the operative document says so.”
Pitch context
You will see “Sensitive personal data” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches privacy, data protection & cybersecurity compliance.
Why it matters: In privacy, data protection & cybersecurity compliance, a loose definition can change rights, obligations, approval, disclosure or enforceability.
Caution
Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.
Connected terms
- Special-category dataThe search label “special-category data” can route to both entries.
Sources & evidence · 8
Direct term-level sources and supporting source families.
- U.S. Federal Trade Commission — Advertising and Marketing GuidanceDirect source · primary · checked 2026-08-16
- National Institute of Standards and Technology — Computer Security Resource Center GlossaryDirect source · primary · checked 2026-08-16
- American Marketing Association — Definitions of Marketing and BrandSupporting source family · institutional · checked 2026-08-16
- Google Analytics Help — Google Analytics dimensions and metricsSupporting source family · primary · checked 2026-08-16
- Google Ads Help — Google Ads metrics and reportingSupporting source family · primary · checked 2026-08-16
- Interactive Advertising Bureau — Measurement guidelines and standardsSupporting source family · institutional · checked 2026-08-16
- OECD — G20/OECD Principles of Corporate Governance 2023Supporting source family · institutional · checked 2026-08-16
- U.S. Securities and Exchange Commission — EDGAR and filing resourcesSupporting source family · primary · checked 2026-08-16