Compliance Library Blog Product Sign In
GDPR-9-02 Requirement 9 — Processing of special categories of personal data

Explicit Consent Requirement for Special Category Data

Description

When relying on explicit consent as the lawful basis for processing special category data, controllers must obtain explicit consent from the data subject for one or more specified purposes, unless...

Full Analysis & Evidence Requirements

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Sign In to View

Map this obligation to your AI systems

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started

Start your compliance assessment

Map obligations to your AI systems, identify gaps, and generate board-ready reports. Plans start at $149/mo.

Get Started