Genetic data are data on the inherited or acquired genetic traits of a data subject.
These data are considered part of the special categories of personal data in the General Data Protection Regulation, the processing of which requires the express consent of the data subjects. Processing of genetic data, for example in a doctor’s office or a hospital, is possible in principle, but there are strict rules on confidentiality. These data may only be processed by qualified personnel subject to professional secrecy.
Article 4(13) GDPR (Definitions)
“genetic data” means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in question
Source: Regulation (EU) 2016/679