Hacker News new | ask | show | jobs
by victorbjorklund 510 days ago
Personal data (while being what GDPR uses) is not as precise. Key is "identifiable".

For example "likes french fries" is "personal data" in the general sense but not gdpr since it is not identifiable since you cant figure out who it is talking about. Your name, address, etc is identifiable because it can be tied to a physical person.

1 comments

GDPR is not concerned with whether or not the data is identifiable. If it is linked to an individual, it is personal data.

In the context of an analytics package, a pageview would be considered personal data because it is associated with an individual user.

Article 4 is pretty clear.

> ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

https://gdpr-info.eu/art-4-gdpr/