The Act defines personal data as any data relating to the data subject (identified or identifiable), i.e. information that can be traced directly or indirectly to a specific individual, deceased or living.
The Act however defines sensitive personal data as information about origin, skin colour, race, political opinions, religious beliefs and other life philosophies, data on whether a man has been suspected of, indicted for, prosecuted for or convicted of a punishable offence, health data, including genetic data and data on use of alcohol, medical drugs and narcotics, data concerning sex life (and sexual behaviour) and data on trade-union membership.