On November 14, 2019, the UK Information Commissioner’s Office (ICO) published detailed guidance on the processing of special category data.
The guidance sets out
- what are the special categories of data,
- the rules that apply to the processing of special category data under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018 (DPA);
- the conditions for processing special category data; and
- additional guidance on the substantial public interest condition, including what is an “appropriate policy document”.