The GDPR concerns the processing of personal data. So, it is important to know exactly what is meant by personal data. Personal Data is any information relating directly, or indirectly, to an identified or identifiable natural person called a data subject. Let's think about what this very broad definition means:
- Information that not only directly, but also indirectly, relates to a person is also personal. Number of references is not limited.
- It does not matter if the processing activity has the person identified or not. It is sufficient that a person can be identified even, by an external party, for the data to be personal.
- It does not even matter, if this process of identification is possible for all records, or to ...