Is Religion Classed as Sensitive Personal Data?

Yes. Under UK GDPR, information revealing someone’s religious or philosophical beliefs is special category data, which needs extra protection.

For churches, that covers more than you might think. A membership list, a rota or even an email list can reveal that someone belongs to a church.

To use special category data, an organisation needs a lawful basis and a separate condition. Churches can usually rely on the condition for not-for-profit bodies with a religious aim. It covers members, former members and regular contacts, as long as their details aren’t shared outside the church without consent. Health details in prayer requests are special category data too.