Sensitive Personal Information
All five states treat citizenship, genetic/biometric data, physical/mental health, race/ethnicity, religion, and sexual orientation as sensitive. States add categories: Colorado, Connecticut, Virginia treat children's data as sensitive; California adds union membership, philosophical beliefs, and the content of communications.
How this supports CIPP/US study
Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US exam questions.
All five states' definition of sensitive personal information includes citizenship; genetic and/or biometric information; physical or mental health conditions; race or ethnicity; religion; and sexual orientation.
| Added category | States |
|---|---|
| Children's data treated as sensitive | Colorado, Connecticut, Virginia |
| Geolocation as sensitive | California, Connecticut, Utah, Virginia |
| Union membership, philosophical beliefs, content of mail/email/text | California (additional) |
Colorado, Connecticut, and Virginia treat children's data as sensitive personal information, which means processing it requires opt-in consent. This links directly to how those states handle children's data obligations.
Key terms - quick answers
What is “Sensitive personal information”?
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.