Any information relating to an identified or identifiable natural person (data subject) — Art. 4(1).
Under GDPR Art. 4(1), personal data is any information relating to an identified or identifiable natural person — directly or indirectly, by reference to an identifier such as a name, ID number, location data, online identifier, or one/more factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.
Run a free ComplianceIQ audit against GDPR and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.