Every day at work, you handle personal data — probably more often than you realize. Personal data is any information relating to an identified or identifiable living person, known in GDPR terminology as a 'data subject.' This goes far beyond names and addresses. An employee ID, a customer's purchase history, an IP address logged by your website, or even a photo taken at a company event can all be personal data if they can be linked back to a specific person.