Special category data
Especially sensitive personal data (health, biometrics, beliefs…) whose processing Art. 9 GDPR prohibits except in specific cases.
Art. 9 of the GDPR gives extra protection to certain data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used to identify a person, health data and data about sex life or sexual orientation. Processing it is prohibited unless one of the exceptions listed in that article applies.
It turns up in meetings more often than you’d think: a medical consultation, an HR interview about sick leave or a meeting with a trade union committee. And a voiceprint used to recognise someone is biometric data.
- Record only what’s needed and give clear notice.
- Restrict who can access those recordings.
- Set a short deletion period.
In Echo you can keep sensitive material in restricted folders, turn on automatic deletion and hide personal data in the transcript. Speaker recognition is off by default. In healthcare, the AI-generated note must be reviewed by the professional. This is general information, not legal advice.
