Skip to content
Step 1 / –
flag Introduction

Personal data

Almost everything you keep about people is personal data. In this module you will learn what counts as personal data, who it applies to, and which data get extra protection.

target What you will learn in this module
  • check_circle What personal data actually is
  • check_circle The three kinds: about people, related to people, and special category data
  • check_circle Who it applies to (spoiler: not only your customers)
menu_book Theory · 1 of 3

What is personal data?

Personal data is all information that relates to an Identifiable individual A person you can identify directly or indirectly, not only through a name, but also through a customer number, an email address, a number plate, or an IP address. .

It covers everyone you interact with: customers, prospects, employees, suppliers, contacts, club members, and third parties.

info Remember

Not only your customers; employees, members, suppliers, and contacts are all included.

menu_book Theory · 2 of 3

Three kinds of personal data, here the first two

badge Data about people

Characteristics of the person themselves: name, address, date of birth, age, gender …

folder_shared Data related to people

Anything you can link to a person: purchase history, customer file, payroll data, CV, email, customer number, passport or driving licence number, phone number, number plate, VAT number, payment details, profile photo, CCTV footage, IP address, tracking cookie …

menu_book Theory · 3 of 3

Special category data, as the third kind

A third group gets extra protection: the so-called special category data.

shield_person Special category data, extra protected

Health and Biometric data Unique physical characteristics that can identify someone, such as a fingerprint or face scan. Precisely because they are so sensitive, strict rules apply, for example for fingerprint scans at work. Lees meer in de kennisbankarrow_forward , criminal-conviction data, trade-union membership, and religious or political beliefs.

For this data, stricter conditions apply than for ordinary personal data.

cases Example · 1 of 2

Is this personal data?

Case 1 The loyalty card

“Our loyalty card stores surname, postcode, and purchase history.”

check_circle Yes. Surname and postcode are data about a person, purchase history is data related to that person. Together they make the customer identifiable, so personal data.
cases Example · 2 of 2

Not only customers

Case 2 Rotas and sick days for the team

“We have 8 colleagues in the shop. Each month we make the rotas and track attendance and sick days.”

check_circle Yes, personal data about your employees. Rotas and attendance are personal data; sick days relate to health and are therefore special category data with extra protection.
quiz Practice · question 1 of 2
info Not for points, choose the correct answer to continue
"Our webshop stores the GPS location of customers, but we do not do anything with it. Is this personal data?"
Correct: as soon as data can be linked to an identifiable individual, it is personal data, even if you are not (yet) doing anything with it.
quiz Practice · question 2 of 2
"Which of these does the GDPR consider special category data, with extra protection?"
Correct: among others, health, biometric, and criminal-conviction data, trade-union membership, and religious or political beliefs are special category data and get extra protection.
summarize Summary

What you take away from module 2

  • bolt Personal data is all information linked to an identifiable individual.
  • bolt It applies to customers, employees, members, suppliers, and contacts.
  • bolt Three kinds: data about people, data related to people, and special category data.
  • bolt Special category data (e.g. health, biometric, criminal-conviction) is extra protected.
workspace_premium Module complete

Module 2 complete 🎉

You now recognise what personal data is and which data needs extra protection. In module 3 we dive into the first of the GDPR core rules: data minimisation.

lock_open 2 of 8 modules

On your way to your “GDPR essentials for SMEs” certificate

Complete all 8 modules and pass the final exam (at least 70%) to receive a personal certificate in your name, with a verifiable code.

check_circle Modules 1-2 completeradio_button_unchecked Modules 3-8radio_button_unchecked Final exam ≥ 70%
workspace_premium