Sensitive Personal Information
All five states treat citizenship, genetic/biometric data, physical/mental health, race/ethnicity, religion, and sexual orientation as sensitive. States add categories: Colorado, Connecticut, Virginia treat children's data as sensitive; California adds union membership, philosophical beliefs, and the content of communications.
All five states' definition of sensitive personal information includes citizenship; genetic and/or biometric information; physical or mental health conditions; race or ethnicity; religion; and sexual orientation.
| Added category | States |
|---|---|
| Children's data treated as sensitive | Colorado, Connecticut, Virginia |
| Geolocation as sensitive | California, Connecticut, Utah, Virginia |
| Union membership, philosophical beliefs, content of mail/email/text | California (additional) |
Colorado, Connecticut, and Virginia treat children's data as sensitive personal information, which means processing it requires opt-in consent. This links directly to how those states handle children's data obligations.