ICO Guidance on Inference of Special Category Data
The ICO's guidance confirms that special category data is not limited to data explicitly labelled as relating to a protected characteristic. Data that…
Authority catalogue v1.12.27 data current as of
Read the source at ico.org.uk ↗
- Citation
- ICO, 'What is special category data?', updated April 2024
- Jurisdiction
- UK-wide
- Year
- 2024
- Status
- Authoritative
- Certainty
- Settled
In brief
The ICO's guidance confirms that special category data is not limited to data explicitly labelled as relating to a protected characteristic. Data that reveals or allows inference of a protected characteristic — including gender reassignment status — triggers the full protections of Article 9 UK GDPR. This is critical for sport registration systems where team allocation or eligibility categorisation may reveal a participant's gender history without explicitly recording it.
Key provisions
- holding-1 — Data that reveals a protected characteristic (e.g., gender reassignment status) is special category data under Article 9 UK GDPR even when not explicitly labelled: Data that reveals a protected characteristic (e.g. gender reassignment status) is special category data under Article 9 UK GDPR, even when the data is not explicitly labelled as such.
- holding-2 — Inferred data has the same legal status as explicitly collected data: Inferred data has the same legal status as explicitly collected data. There is no distinction between data voluntarily provided and data inferred from other information.
- holding-3 — Organisations must assess whether their data processing reveals protected characteristics by inference, not only by direct collection: Organisations must assess whether their data processing reveals protected characteristics by inference, not only by direct collection. The assessment must be proactive.
- A known woman appearing on a men's team list reveals her gender history by inference — this constitutes special category data processing: A known woman appearing on a men's team list reveals her gender history by inference — this constitutes special category data processing requiring Article 9 compliance.
When relevant
When any system, process, or administrative action creates the possibility that a person's gender reassignment status could be inferred — including registration systems that record birth sex, team allocation lists that contradict known presentation, or eligibility decisions that require disclosure of gender history.
Take this further
Assess your organisation
See how your policies and practice measure up against this authority — and the other 121 in the catalogue — with the toolkit's free diagnostic.
Browse the full authority catalogue or the toolkit's resources hub for more context.
Contains public sector information licensed under the Open Government Licence v3.0 .