GDPR Article 9, Special Categories Including Biometric Data

Regulation (EU) 2016/679, Art. 9

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 25 May 2018.

A sensitive categories rule binding public and private bodies.

As of 24 August 2026.

What it requires

Obtain an explicit General Data Protection Regulation (GDPR) Article 9(2) legal basis before processing biometric, health, or other special-category personal data of a person in the Czech Republic; Act 110/2019 supplies no separate Czech basis.

What it reaches

Excludes recording-derived identifiersNo

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

General Data Protection Regulation (GDPR) Article 9(1) treats biometric data processed for unique identification as a special category, prohibited absent an Article 9(2) ground. Act 110/2019 has no biometric-specific provision narrowing or elaborating this, consistent with two independent commentary sources describing no distinct Czech biometric restriction beyond the general EU-law enabling clause.

General employee monitoring sits in the Labour Code (zakonik prace, Act No. 262/2006 Coll.), but that Act's text is not independently confirmed here, and no specific employment-biometric consent or works-council provision appears in commentary; this is a genuine gap, not a confirmed absence.

When LexLint raises it

processes_biometrics
processes_voice
high_risk_decisions

Read the law

UOOU, Act 110/2019 (no biometric provision found)
CMS and DLA Piper commentary (corroborating negative finding)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app