On May 25, 2018, the EU General Data Protection Regulation (GDPR) came into effect across Europe, requiring global businesses handling information from EU citizens to demonstrate compliance. This regulation introduced several significant updates, including an expanded definition of personal data. Recognizing what constitutes personal data is crucial in delineating an organization's data scope.
Personal Data under GDPR encompasses information related to a natural person that directly or indirectly identifies them, such as a name, ID number, location data, or unique identifier. Once this understanding is established, it's essential to grasp the data processing concepts and the responsible roles.
