Sensitive data

Article 16 of the Wet bescherming persoonsgegevens (Wbp; Dutch Data Protection Act) contains a prohibition on the processing of sensitive personal data (such as religion, race, political persuasion, health and criminal past), unless the law provides for an explicit basis for this.
Pursuant to Article 23(1)e Wbp, the Dutch DPA may grant an exemption, if this is required in view of substantial general interest and appropriate guarantees are offered to protect personal privacy.