In order to meet the definition of personal data in the Data Protection Act, information must be ‘personal’ and it must also be ‘data’. The personal part of the definition is relatively straightforward, referring to data about:

•  identifiable;

•  living;

•  individuals.

It therefore does not apply to information about companies or organisations, but it could apply to named contacts within those organisations. It does not apply to data which is completely anonymous, but it does apply if you can identify the people from the data combined with other information you hold (or if anyone you disclose it to could identify them). It does not apply to information about people who have died, and it does not apply to ...

Get Data Protection vs. Freedom of Information now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.