What counts as personal data under GDPR?
Personal data covers data that could directly or indirectly identify a person.
Under GDPR Article 4 (1) personal data is defined as follows:
Personal data are any information which are related to an identified or identifiable natural person.
In practice, this covers a very wide range of data, including:
- Online identifiers, including:
- IP address
- Tracking cookie or equivalent
- Health information
- Cultural profile
- And more
Source: European Commission.