Personal data that is not sensitive may still merit extra protection. With the exception of personal identification numbers, there are no special rules for how personal data meriting extra protection must be processed. This means that such data may be processed on the same legal basis as “ordinary” personal data. However, they must be protected more than other personal data.

Unlike sensitive personal data, there is no definition in law of which data merits extra protection. Examples of personal data that the Swedish Data Protection Authority considers to merit extra protection are:

• Personal identification number
• Some salary data
• Protected personal data
• Classified information
• Information on law offences
• Data on social conditions
• Information closely related to the private sphere
• Descriptions and values of personal qualities