unified
UC-DATA-04 — Restrict processing of special categories of personal data
Inventory all processing of special categories of personal data (e.g., health, biometric, genetic, race or ethnicity, religion, sexual orientation) and prohibit such processing unless a documented legal exception or explicit consent applies. Apply heightened safeguards to this data and record the exception relied upon for each processing activity.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Data Protection & Privacy
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-DATA-04
- title
- Restrict processing of special categories of personal data
- statement
- Inventory all processing of special categories of personal data (e.g., health, biometric, genetic, race or ethnicity, religion, sexual orientation) and prohibit such processing unless a documented legal exception or explicit consent applies. Apply heightened safeguards to this data and record the exception relied upon for each processing activity.
- domain
- Data Protection & Privacy
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- PT-7
- coverage
- full
- relationship
- superset_of
- framework
- gdpr
- control_id
- GDPR-Art9
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-DATA-04 — Restrict processing of special categories of personal data mitigates Illegal processing of personal or sensitive data
- strength
- primary
- rationale
- Prohibiting special-category processing unless a documented legal exception or explicit consent applies directly prevents unlawful sensitive-data processing.
- Privacy Safeguards & Notice Management operates UC-DATA-04 — Restrict processing of special categories of personal data
- UC-DATA-04 — Restrict processing of special categories of personal data mitigates Privacy harms: distortion, stigmatization, unwarranted restriction
- strength
- related
- rationale
- Restricting processing of race/health/religion/orientation data reduces the stigmatization and discrimination such data enables.
- UC-DATA-04 — Restrict processing of special categories of personal data mitigates Unauthorized disclosure / breach of sensitive information
- strength
- related
- rationale
- Heightened safeguards on special-category data reduce the likelihood and impact of exposing the most sensitive records.
- UC-DATA-04 — Restrict processing of special categories of personal data maps_to PT-7 — Specific Categories of Personally Identifiable Information
- framework
- nist-800-53
- control_id
- PT-7
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-04 — Restrict processing of special categories of personal data maps_to GDPR-Art9 — Processing of special categories of data
- framework
- gdpr
- control_id
- GDPR-Art9
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Regulation (EU) 2016/679
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.