Sign Up

What is 8 + 4?

Have an account? Sign In Now

Sign In

What is 8 + 4?

Forgot Password?

Don't have account, Sign Up Here

Forgot Password

Lost your password? Please enter your email address. You will receive a link and will create a new password via email.

What is 8 + 4?

Have an account? Sign In Now

Please type your username.

Please type your E-Mail.

Please choose an appropriate title for the question so it can be answered easily.
Please choose the appropriate section so the question can be searched easily.

Type the description thoroughly and in details.

What is 8 + 4?

Sign InSign Up

Watercooler by DPOrganizer

Watercooler by DPOrganizer Logo Watercooler by DPOrganizer Logo

Watercooler by DPOrganizer Navigation

Search
Ask A Question

Mobile menu

Close
Ask a Question
  • Home
  • Categories
    • GDPR
    • Privacy Management
    • Professional Development
    • Software tips and tricks
    • Polls
  • Help
  • About Watercooler
Home/ Questions/Q 7696
Next
In Process
Anonymous
  • 0
Asked: June 22, 20212021-06-22T09:23:30+01:00 2021-06-22T09:23:30+01:00In: GDPR

Gender and Special Category Data

  • 0

Hi

We are looking to collect gender data from our membership base. If we ask for “male/felmale/prefer not to say” my understanding is that we are not governed by GDPR.

However if we ask “male/female/non-binary/prefer not to say” does the Non Binary option take us into GDPR and then Special Category data please?

Thank you for your help.

  • 9 9 Answers
  • 0 Followers
  • 0
Answer
Share
  • Facebook

    9 Answers

    • Voted
    • Oldest
    • Recent
    1. BlueBottle

      BlueBottle

      • 0 Questions
      • 26 Answers
      • 0 Best Answers
      • 27 Points
      View Profile
      BlueBottle Bronze contributor
      2021-06-30T09:13:58+01:00Added an answer on June 30, 2021 at 9:13 am

      I have to say I agree with Dominga that this would not be special category, however you do need to be careful and ensure you have a documented purpose and lawful basis for processing.

      Additionally, I would advise taking specialist advice before including non-binary as the ONLY option beside male and female. You may consider this as part of the consultation phase in a DPIA. Speak to your members and see what they say, take their views into consideration and learn from them.

      • 0
      • Reply
      • Share
        Share
        • Share on Facebook
        • Share on Twitter
        • Share on LinkedIn
    2. HellenB

      HellenB

      • 2 Questions
      • 83 Answers
      • 0 Best Answers
      • 79 Points
      View Profile
      HellenB Silver contributor
      2021-06-22T16:58:11+01:00Added an answer on June 22, 2021 at 4:58 pm

      As Dominga says, it is very dependent on how you phrase the question and also that you need to have a clear reason for asking it.
      For instance, knowing the gender identity might enable you to create initiatives to increase inclusivity. But if you don’t have a clear reason for processing this data then you shouldn’t be collecting it.
      Once you add in an option such as non-binary then you are into special category data territory and that is explicit consent under Art 9

      • 0
      • Reply
      • Share
        Share
        • Share on Facebook
        • Share on Twitter
        • Share on LinkedIn
      • Dominga Leone

        Dominga Leone

        • 0 Questions
        • 20 Answers
        • 0 Best Answers
        • 21 Points
        View Profile
        Dominga Leone Bronze contributor
        2021-06-22T22:12:23+01:00Replied to answer on June 22, 2021 at 10:12 pm

        Hi Hellen. Why do you evaluate non binary as being special category? I was quite sure it is not special category. This isn’t me contradicting you by the way, just really curious and most open to being wrong

        • 0
        • Reply
        • Share
          Share
          • Share on Facebook
          • Share on Twitter
          • Share on LinkedIn
        • HellenB

          HellenB

          • 2 Questions
          • 83 Answers
          • 0 Best Answers
          • 79 Points
          View Profile
          HellenB Silver contributor
          2021-06-23T10:46:14+01:00Replied to answer on June 23, 2021 at 10:46 am

          Hi Dominga
          I would define it as such because it isn’t a biologically assigned gender (unless an individual is intersex or has a medical condition), it is a self-determined gender assignment and therefore individuals who define themselves in this way deserve additional safeguards because they may be subject to prejudice as a result of their declaration.
          Does this make sense?

          • 0
          • Reply
          • Share
            Share
            • Share on Facebook
            • Share on Twitter
            • Share on LinkedIn
          • Dominga Leone

            Dominga Leone

            • 0 Questions
            • 20 Answers
            • 0 Best Answers
            • 21 Points
            View Profile
            Dominga Leone Bronze contributor
            2021-06-23T12:55:37+01:00Replied to answer on June 23, 2021 at 12:55 pm
            This answer was edited.

            Thanks for answering Hellen. I am still not sure I see this as special category, as it is neither a health condition nor an indication of sexual orientation or preference, it is just an expression of not identifying with a social construct of either male or female. It is interesting to hear other people’s views on this, as it is a complex topic that I am far from an expert in and I can understand why some might consider it necessary to treat it as special category. Interestingly, gender identity was listed as special category in the early drafts of GDPR and then removed, which reinforced my assumptions on this topic. I hope more is released on this matter and that Supervisory Authorities are clear on their views – I am sure we will see debate on this matter in the forthcoming years. Thanks again.

            • 0
            • Reply
            • Share
              Share
              • Share on Facebook
              • Share on Twitter
              • Share on LinkedIn
            • HellenB

              HellenB

              • 2 Questions
              • 83 Answers
              • 0 Best Answers
              • 79 Points
              View Profile
              HellenB Silver contributor
              2021-06-25T19:46:21+01:00Replied to answer on June 25, 2021 at 7:46 pm
              This answer was edited.

              You are absolutely right in that it is very complex.
              Maybe a simpler way would be to think about the one defining factor for all sensitive data – that all of them ‘could’ result in prejudice/affect human rights.
              Defining yourself as a ‘man’ or a ‘woman’ will have a nominal affect (in theory!) but there are those who think that defining yourself as ‘non-binary’ is an affectation and will attach other labels to you including suppositions about your sexuality, sex life etc.

              • 1
              • Share
                Share
                • Share on Facebook
                • Share on Twitter
                • Share on LinkedIn
            • Henry

              Henry

              • 5 Questions
              • 4 Answers
              • 0 Best Answers
              • 2 Points
              View Profile
              Henry
              2021-07-08T20:57:13+01:00Replied to answer on July 8, 2021 at 8:57 pm
              This answer was edited.

              We had a very similar discussion when changing HR systems, and sought the advice of the ICO. They were uncharacteristically helpful over the phone and took a similar view to Hellen – it is clear that data regarding genders other than those assigned at birth deserve further protection and that at a pinch, they might consider that data to fall within the sex-life/orientation category.
              Not perfect, I know, but does seem odd that it wasn’t included given the issue’s prevalence and potential for harm.
              Stonewall also produced some good guidance on this, especially regarding using substantial public interest as an Art. 9 condition for processing. If anyone’s interested, I can email them a copy.

              • 0
              • Share
                Share
                • Share on Facebook
                • Share on Twitter
                • Share on LinkedIn
    3. Dominga Leone

      Dominga Leone

      • 0 Questions
      • 20 Answers
      • 0 Best Answers
      • 21 Points
      View Profile
      Dominga Leone Bronze contributor
      2021-06-22T15:14:39+01:00Added an answer on June 22, 2021 at 3:14 pm

      I should add though, that in line with data minimisation principles, you must ensure you can justify the use of capturing gender identity. There must be a specified purpose and a good rationale for why it is necessary and proportional to use this for your purpose.

      • 0
      • Reply
      • Share
        Share
        • Share on Facebook
        • Share on Twitter
        • Share on LinkedIn
    4. Dominga Leone

      Dominga Leone

      • 0 Questions
      • 20 Answers
      • 0 Best Answers
      • 21 Points
      View Profile
      Dominga Leone Bronze contributor
      2021-06-22T13:40:54+01:00Added an answer on June 22, 2021 at 1:40 pm

      I would say it is not special category data. Gender identity is different from sexual orientation/preference and I don’t think an organisation can deduce or make assumptions about someone’s sexual orientation just from their gender identity. Unless you have other data from which it could be inferred, I think you are fine.

      • 0
      • Reply
      • Share
        Share
        • Share on Facebook
        • Share on Twitter
        • Share on LinkedIn

    Leave an answer
    Cancel reply

    You must login to add an answer.

    What is 8 + 4?

    Forgot Password?

    Sidebar

    Ask A Question

    Trending contributors

    Smurf333

    Smurf333

    • 11 Answers
    Bronze contributor
    Dave_Wylie

    Dave_Wylie

    • 28 Answers
    Bronze contributor
    CRodica

    CRodica

    • 6 Answers
    Rising star contributor
    Atis

    Atis

    • 4 Answers
    Andrea

    Andrea

    • 15 Answers
    Bronze contributor

    Recent questions

    • Anonymous

      Instagram!!

      • 0 Answers
    • Olga

      DPO in EU and UK

      • 0 Answers
    • Smurf333

      DBS scenario with HR retaining excessive information for longer than ...

      • 0 Answers
    • CRodica

      Parties role towards employees data for administrative purposes

      • 0 Answers
    • Donna

      ‘serious harm test’ for health data

      • 0 Answers

    Explore

    • Home
    • Categories
      • GDPR
      • Privacy Management
      • Professional Development
      • Software tips and tricks
      • Polls
    • Help
    • About Watercooler

    Footer

    Your privacy

    • Cookie notice
    • Privacy notice

    Terms and policy

    • Acceptable Use Policy
    • Terms of Use

    © 2021 DPOrganizer. All Rights Reserved. With Love by DPOrganizer.