In the General Data Protection Regulation (the GDPR), Regulation (EU) 2016/679, personal data is widely defined and means any information relating to an identified or identifiable natural person, known as the ‘data subject’ (Article 4(1) of Regulation (EU) 2016/679, the GDPR). Processing is even more widely defined, extending to ‘any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction’ (Article 4(2) of Regulation (EU) 2016/679, the GDPR). For more information, see Practice Note: Key definitions under EU data protection law. If the information requested by the landlord is