Personal data
Any information relating to an identified or identifiable living person.
Under the GDPR, personal data is any information relating to an identified or identifiable natural person, called the data subject. A person is identifiable if they can be identified directly or indirectly, for example by a name, an identification number, location data, an online identifier or factors specific to them. Account numbers, transaction histories and the prompts a customer types into an agent are usually personal data, so every agent that touches them falls within data protection law.
Agent Minute explains this term on 7 October 2026.
Related terms
ConsentA freely given, specific, informed and unambiguous indication of a person's agreement to the processing of their data.Lawful basisOne of the six grounds in the GDPR that make processing personal data lawful, of which consent is only one.Data minimisationUsing personal data that is adequate, relevant and limited to what is necessary for the purpose.Purpose limitationCollecting personal data for specified, explicit and legitimate purposes and not reusing it in incompatible ways.