If you process information that is within the scope of personal data as defined under the UK General Data Protection Regulation (GDPR), then your use of personal data will be subject to data protection legislation. Recognising information that is within the scope of the statutory definition of personal data is an important first step for organisations towards determining if and how data protection legislation will apply to its use of personal data.
Personal data is defined in the GDPR as:
“’personal data’ means any information