# Data Categories
URL: https://docs.autociso.io/console/privacy/data-categories/
Description: The list of data categories used to tag personal data. Only Tenant Owners can manage it. Available on The Scale plan. This page has no sidebar entry; open it at /settings/privacy/categories.

*This is the help text the console shows in the help panel on this page.*

The list of data categories used to tag personal data. Only [Tenant Owners](https://docs.autociso.io/getting-started/roles-and-permissions/) can manage it. Available on [The Scale plan](https://docs.autociso.io/getting-started/plans-and-features/). This page has no sidebar entry; open it at `/settings/privacy/categories`.

### Built-in Categories
AutoCISO provides 14 GDPR-aligned categories. They show a **System** badge and cannot be deleted; you can rename their label, but not change their Special flag.

**Standard Personal Data**
- Identification data
- Contact details
- Financial data
- Location data
- Employment data
- Behavioral/usage data
- Technical/device data

**Special Categories (Art. 9) — extra protection required**
- Health data
- Biometric data
- Genetic data
- Racial or ethnic origin
- Political opinions
- Religious beliefs
- Sexual orientation

### Custom Categories
Click **Add Category** and enter a Code (for example `biometric_data`), a Label and, if needed, switch on **Special Category**. Custom categories can be edited and deleted.

### Special-Category Flag
Entries in the [Personal Data Dictionary](https://docs.autociso.io/product/privacy/data-dictionary/) that use a special category are marked sensitive. Those without a [completed DPIA](https://docs.autociso.io/console/privacy/dpia/) show up in the "Sensitive Without DPIA" card on the [DPO Cockpit](https://docs.autociso.io/console/privacy/cockpit/).