# Personal Data ## GDPR Under [[GDPR - General Data Protection Regulation|GDPR]], personal data is any information relating to an identified or identifiable natural person (not companies, governments or other organizations). Personal data is information about people such as names, location information like a home address or current GPS position, a mobile phone number, email address, mobile device ID and IP address. Personal data includes data that it directly or indirectly related to individuals. Even interests and habits is a type of indirect identification and is considered personal data. Personal data taken alone may not be enough to identify an individual, but it can be combined from different sources. ### Categories - Racial or ethnic origin - Religious or philosophical beliefs - Political opinions - Trade union membership - Health - Sex life or sexual orientation - Genetic - Biometric ### What is "processing" Personal data is considered processed from collection to destruction, including collecting, using, adapting, sharing, storing restricting and destroying. ### Consent Consent can be asked from customers but it needs to met specifics requirements: - it must be expressed clearly - it must be freely given, not compulsory - it must be accessible, using precise language and be clear - it must be distinguishable from other consent items - and silence is not consent --- Bibliography: - [Title - website.com](need bibliography)