On Genetic and Biometric Data
Unlike GDPR where genetic and biometric data are only considered sensitive personal data if processed for a specific purpose, genetic data under DPA is always considered sensitive by its very nature, regardless of purpose.
Under the GDPR, there is a difference between genetic data and biometric data:
i. ‘genetic data’ means personal data relating to the inherited or acquired genetic characteristics of a natural person (“He has blue eyes”)
ii. ‘biometric data’ means personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person (Face ID or fingerprinting)
Under the DPA, biometric and genetic data appears to be the same.