← Back to concept explainers

Concept Fable

Sensitive personal data

Conclusion first:It is a category of personal data with higher harm risk, such as health, financial, biometric, precise location, minors' information, race and religion, political views, sexual orientation, or data that may lead to discrimination and major harm to rights and interests.

Sensitive Personal Data · Privacy

Read the story first. There is no rush to give a definition here; let the question grow on its own first.

Fable

The list in the red cabinet

In the white cabinet were the townspeople's ordinary registrations: name, address, shop number. Clerks used them when issuing water tickets, sending mail, and giving road repair notices. Everyone knew these records had to be kept, but normally several windows could check them.

Deep in the archive there was also a red cabinet. Inside were medical records, debt records, children's parentage, religious registrations, physical disabilities, and transcripts of requests for help from domestic abuse. The new clerk thought these were also just "personal data" and nearly handed the red cabinet list to the chamber of commerce for coupons. The red cabinet is not always simply about heavier locks. Some data is ordinary in one matter but exposes a situation in another; for example, an address paired with a help-seeking record suddenly deepens the harm.

The curator stopped her. A leak of White Cabinet data brings harassment and trouble, but a leak of Red Cabinet data can cost someone their job, subject them to discrimination, threats, or even make them afraid to seek help again. Both are personal, but the depth of harm is completely different.

Later the archive changed its rules. Queries of the white cabinet required registering a reason; queries of the red cabinet required fewer people, a clearer purpose, shorter retention, and stricter approval. Someone who only needed to know "whether they qualify for assistance" could not see the full medical record. The first version of the rules gave the red cabinet key only to the director. As a result, when the director was away, the assistance window stalled, and no one dared handle urgent matters. Later they changed it to tiered approval by a small number of trained staff.

Among the names that were almost handed over were a woman hiding from debt and a child who had just asked for help. If the chamber of commerce used them for promotions, the neighbors would quickly guess their situation. The curator had the newcomer personally return the list to the red cabinet, and only then did she understand why the red cabinet cannot be opened by the rules of the white cabinet. The newcomer also learned "enough is enough." If the chamber of commerce only wants to confirm whether someone qualifies for a subsidy, a yes or no is enough; it should not take away the whole register that can piece together a life situation.

Townspeople gradually became willing to keep telling the archive their difficulties, because the red cabinet was treated separately rather than mixed into ordinary cabinets for circulation. The most fragile information cannot flow at the threshold of ordinary information.

Reveal

This story is about: sensitive personal data

It is a category of personal data with higher harm risk, such as health, financial, biometric, precise location, minors' information, race and religion, political views, sexual orientation, or data that may lead to discrimination and major harm to rights and interests.

Sensitive personal data usually requires stronger protection: clearer purposes, fewer viewers, stricter authorization, shorter retention, more detailed logs, and in many scenarios a higher level of consent or legal basis.

Metaphor mapping

  • White cabinet data: ordinary personal data
  • Red cabinet data: sensitive personal data
  • Chamber of commerce coupons: out-of-purpose use and secondary abuse
  • Look only at eligibility for assistance: least-privilege access
  • Stricter approval and retention: additional protection obligations for sensitive data

Andy Ren Xu's judgment

The key to sensitive personal data isn't whether a field looks private, but the level of harm from leakage or misuse. Once an agent connects to customer systems, it must first distinguish the red cabinet from the white cabinet.

special category databiometric datahealth datafinancial dataPII

Related distinctions

This concept is easily confused with adjacent concepts; it is recommended to continue to the comparison page.

京ICP备2026014272号