Any information relating to an identified or identifiable natural person
Key phrases: "identified" or "identifiable"
Example: An anonymous junior doctor in a newspaper story can still be identified with research
Data Types
Anonymous Data
All identifiable elements are removed
Example: Payroll file used for gender pay gap analysis with only gender and pay columns
Note: If roles are included, individuals might be identified
Not covered by GDPR
Pseudonymous Data
Information that no longer allows immediate identification without additional information
Example: Payroll file with employee names, addresses, and roles removed but keeping employee IDs
Covered by GDPR
Personal Data
Information that relates to an identifiable person
Examples: Name, address, bank details, gender, occupation, telephone number
Note: Some details like gender are personal data when combined with other information
Covered by GDPR
Sensitive Data
Special categories that merit higher protection
Includes: Race, ethnicity, religious and political beliefs, trade union membership, genetic and biometric data, health data, sexual orientation, criminal offenses
Prohibited from processing unless certain criteria are met (e.g., explicit consent)
Covered by GDPR
Applies to all residents of the European Economic Area (EEA), regardless of nationality
Key Questions and Recap
Medical Data Shared with Researchers: If a medical history is shared with a code replacing the name but can still be identified by the original doctor, it is personal data (pseudonymized)
Importance of Data Types: Not all personal data is of equal importance under GDPR
Example: Bank details are personal data; political views are sensitive data
GDPR Application: Does not apply to deceased individuals, companies, or organizations