Fact · Voice privacy and security
Article 9 of the GDPR prohibits processing special categories of personal data, including biometric data used for the purpose of uniquely identifying a natural person, unless one of the listed exceptions applies.
Checked against its source on October 16, 2026
In the source's own words
“the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited”
Art. 9 GDPR: Processing of special categories of personal data, gdpr-info.eu (Intersoft Consulting), 2016, Article 9(1).
Open the original- What it measures
- Article 9(2) lists the exceptions, such as explicit consent. The rule applies to biometric data processed to identify a person, not to every recording.
- What it does not show
- The prohibition is for biometric data processed for unique identification. Plain transcription of speech is generally treated as ordinary personal data.
Source
Cited on
- Speech to Text Privacy: Where Your Voice GoesTopic
- Is Voice to Text Safe? How to Dictate PrivatelyGuide
- Meeting Transcription: How It Works and What to UseGuide
- Is Your Voice Biometric Data? GDPR, BIPA and CCPAGuide
- Does speech to text collect biometric data?Question
- Is a voice recording personal data under GDPR?Question
- Is voice to text GDPR compliant?Question
- Biometric dataGlossary
- Special category data (GDPR)Glossary