Personal data

Any information relating to an identified or identifiable natural person (GDPR Article 4(1)).

A person is identifiable if they can be identified directly or indirectly, for example by a name, an identification number, location data, an online identifier or factors specific to their identity. The definition is broad: email addresses, IP addresses and device identifiers usually count. Pseudonymised data that can be attributed to a person with additional information is still personal data (Recital 26); truly anonymous data is not.

Source: GDPR Art. 4(1) ↗

ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.