Personal data is generally any information that can be used to identify an individual, either directly or indirectly, and any information which relates to or is about an identifiable individual. This can include, but is not limited to, a name, address, phone number, email address or location data from electronic devices (such as mobile phones and IP addresses).

‘Special category’ personal data relates to information that reveals racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health conditions, sexual life, sexual orientation, biometric or genetic data. Personal data relating to criminal offences and convictions should also be treated as special category personal data.