Sensitive personal data must not be held on an employee's
personal file without the employee's explicit consent unless the information is
necessary in order to comply with the employer's legal obligations.
Under s.2 of the Data Protection Act 1998, sensitive
personal data is defined as information that discloses any of the following
about an employee.
| Racial or ethnic origins |
| Political opinions |
| Religious or similar beliefs |
| Trade union membership or non-membership |
| Physical or mental health or condition |
| Sex life or sexual orientation |
| Criminal or alleged criminal activities |
| Criminal proceedings, criminal convictions or any sentences imposed by the courts |
|
|
|
|
|