Personal data means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Essentially, if a person can be identified with one or more pieces of data, then it is covered by data protection law as personal data.
Data protection law
Explore the difference legislation around data law in the UK and Ireland and how it impacts services.
→
Special categories
Data in certain categories need to be treated in a different way depending on legislation. Find out more.
→
Data processing
Learn how you should be tackling data processing, including templates and documents to follow.
→
Subject access request
Learn more about SARs and how you should handle them when received from a data subject.
→
Roles and responsibilities
Define where responsibilities lie with an organisation, data controller or the data processor.
→
Direct marketing
Are all your communications within the law? Follow this guidance to make sure you are within your rights.
→
