What is Personal data?
Personal data is any information that can identify a living person: a name, personal ID number, phone, email, IP address or photo. Health, biometric and criminal record data are special categories that require stricter protection.
In Georgia personal data is protected by the Law on Personal Data Protection (the new version in force since 1 March 2024), and GDPR applies to EU residents' data. Both require organisations to process only what they need and to protect it.
How to spot it
- A customer list in a personal inbox
- Personal ID numbers in a shared spreadsheet
What to do
- Collect only what you need
- Redact what isn't needed before sharing
Related courses
- GDPR & Georgia's data protection lawWhat is and isn't personal data, the five processing principles, data subject rights and incidents.
- Personal data protection basicsWhat personal data is, a GDPR basics check, privacy settings and practical advice.
- Data minimisationLess data, less risk: the collection stage, anonymisation and pseudonymisation.
- Data redaction simulationSimulation: redact personal data before a document is shared.
Terms on this topic
More topics
Start with your team's risk baseline
15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.