Fact · Voice privacy and security
Under the GDPR, the ban on processing special category data does not apply when the person has given explicit consent for one or more specified purposes.
Checked against its source on October 17, 2026
In the source's own words
“the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”
Art. 9 GDPR: Processing of special categories of personal data, gdpr-info.eu (Intersoft Consulting), 2016, Article 9(2)(a).
Open the original- What it measures
- Explicit consent is the exception most voice products would rely on for speaker identification. It must be specific to the purpose, not a general terms acceptance.
- What it does not show
- Union or Member State law can still prohibit this exception for some data. The article has other exceptions too; this fact covers only consent.