Personal data
Almost everything you keep about people is personal data. In this module you will learn what counts as personal data, who it applies to, and which data get extra protection.
- check_circleWhat personal data actually is
- check_circleThe three kinds: about people, related to people, and special category data
- check_circleWho it applies to (spoiler: not only your customers)
What is personal data?
Personal data is all information that relates to an Identifiable individualA person you can identify directly or indirectly, not only through a name, but also through a customer number, an email address, a number plate, or an IP address..
It covers everyone you interact with: customers, prospects, employees, suppliers, contacts, club members, and third parties.
Not only your customers; employees, members, suppliers, and contacts are all included.
Three kinds of personal data, here the first two
Characteristics of the person themselves: name, address, date of birth, age, gender …
Anything you can link to a person: purchase history, customer file, payroll data, CV, email, customer number, passport or driving licence number, phone number, number plate, VAT number, payment details, profile photo, CCTV footage, IP address, tracking cookie …
Special category data, as the third kind
A third group gets extra protection: the so-called special category data.
Health and Biometric dataUnique physical characteristics that can identify someone, such as a fingerprint or face scan. Precisely because they are so sensitive, strict rules apply, for example for fingerprint scans at work.Read more in the knowledge basearrow_forward, criminal-conviction data, trade-union membership, and religious or political beliefs.
For this data, stricter conditions apply than for ordinary personal data.
Is this personal data?
“Our loyalty card stores surname, postcode, and purchase history.”
Not only customers
“We have 8 colleagues in the shop. Each month we make the rotas and track attendance and sick days.”
What you take away from module 2
- boltPersonal data is all information linked to an identifiable individual.
- boltIt applies to customers, employees, members, suppliers, and contacts.
- boltThree kinds: data about people, data related to people, and special category data.
- boltSpecial category data (e.g. health, biometric, criminal-conviction) is extra protected.
Module 2 complete 🎉
You now recognise what personal data is and which data needs extra protection. In module 3 we dive into the first of the GDPR core rules: data minimisation.
On your way to the “GDPR essentials for SMEs” practice quiz
Complete all 8 modules and try the free practice quiz. The official exam with a certificate of attendance is in the GDPRWise app’s paid plans.