Definition of personal data under the General Data Protection Regulation (GDPR) Article 4(1) of Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), defines personal data as: ‘any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.’ An identified or identifiable person is a data subject according to the GDPR and therefore, personal data is defined by reference to the definition of data subject. For further information, see Practice Note: Key definitions under data protection law, in particular section ‘Data subject’. As such there are a number of factors that one should consider when determining if the data that is being processed is to be considered