Say a Social website (not a dating website, but a website similar to Twitter) has an option in the Profile customization where the user can select their sexual orientation.

This is an optional field (can be blank), and the user has an option to choose whether Everyone can see that, or just Friends-only.

Per the following "Test" from ICO, it appears that the only thing that would make that Social website require a DPO (Data Protection Officer) is if the website processes special categories:

1) If the website does not have a "Search" filter on that field, and all it does is show that field on the Profile (as per user's choice), is that website still considered that is processing the field? (and therefore requiring a DPO)

2) As a related question, if the users on that website are free to discuss all their "special categories" on Posts (political opinions, religious beliefs, etc), and these Posts are searchable, does that mean that the website is processing those special categories?

This question has an open bounty worth +50 reputation from Nuno ending tomorrow.

This question has not received enough attention.

Your Answer


By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.