What is personal data?

In all matters related to the implementation of the regulation, the concept of personal data plays a vital role because the GDPR only applies where personal data exists.

Let us examine the definition in more detail:?

1. Personal data is any information relating to an identified or identifiable natural person (data subject) i.e. a person.
2. An identified individual is a person whose identifier (name, phone number, personal ID, login) is among the data.
3. An identifiable individual is a person who can be identified and distinguished from other people.

Personal data is not only the identifier but also the information that relates to a person. And there are specific nuances as well.

Without an identifier, the information becomes anonymous. Relating information and an incomplete identifier will constitute personal data only in cases where it is possible to conduct an additional investigation without using special devices or excessive time and effort. If we do not have a reasonable opportunity to identify the data subject, then such information is not personal but anonymous.

For example, personal data includes information describing the data subject - John Smith is a 38-year-old man and a lawyer. Therefore, the personal information is not the person's name but his profession and age.

?Suppose we are unaware of his name, but we know that someone named John is in our city and is 38 years old. In that case, that information will be anonymous to us. However, if we were told that someone named John is 38 years old, lives in our city, and works at a small law firm called detective law for office, we would quickly identify the person. This information would be classified as personal data.

In simple terms, the name, passport, ID card username, e-mail address, phone number, IP address, and bank card details are always personal data because they are identifiers.?

A vehicle number, handwriting, video, or photo are likely to constitute personal data because they make it easy to identify a person. Whereas address, marital status, sex, gender, e-wallet details, health data, page views, search queries, social media posts, or personal data is known to whom they relate.

It is essential to note that the definition of personal data is gradually changing. Previously before the era of computers and cell phones, for data to be considered personal data, it was sufficient that anyone could hypothetically be identified by anyone using the data.?Now, this criterion is down only to the circle of people who can potentially gain access to this data and use it for identification purposes.