With more privacy statutes being brought in around the world it can be confusing to remember what applies where. An important part of each statute is the definition of “sensitive” or “special” data. This is data which raises a greater risk to individuals if it was disclosed.
However, across each statute it varies as to what constitutes sensitive or special data in each one. Here is a breakdown of how sensitive data is classified between:
- Colorado’s Privacy Act (CPA)
- Europe’s General Data Protection Regulation (GDPR)
- California’s Consumer Privacy Act (CCPA)
- California’s Privacy Right Act (CPRA)
- Virginia’s Consumer Data Protection Act (VCDPA)
