The GDPR defines genetic data as personal data relating to the heritable or acquired genetic characteristics of a natural person which give unique information about the physiology or state of health of that natural person and which result, in particular, from an analysis of a biological sample of the natural person in question.
Genetic data is therefore unique in that it cannot be anonymised.
Because of this intimate and potentially discriminatory nature, genetic data enjoys a particularly protective legal status.
An examination of a person's genetic characteristics may only be undertaken for medical or scientific research purposes.
Before the test is carried out, the person concerned must be informed of its nature and purpose and must express express consent in writing.