What is personal data according to GDPR?

Article 4 of the General Data Protection Regulation offers many useful definitions, including that of personal data.

What is a personal data?

“‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;”


  • Related to a person and can be used to identify them.
  • Fairly all-encompassing.
  • May be applicable to your users and your staff.

Photo by Aaron Burden on Unsplash