Skip to content

Personal Data

What is Personal Data?

Any information relating to an identified or identifiable natural person. Under GDPR, this includes names, identification numbers, location data, online identifiers, and factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of a person.

Privacy

What the standards actually require on personal data

Requirements naming personal data across 6 standards, quoted from the control text.

GDPR30 controls

Process personal data relating to criminal convictions and offences, or related security measures, only under the control of official authority or where Union or Member State law authorises the processing and provides appropriate safeguards for the rights and...

GDPR-Art.10 · Processing of personal data relating to criminal convictions →

A personal data system must be open at all reasonable times to inspection by the Commissioner or an inspection officer, who may require production of the consent records, the records of written notices under s.

malaysia-pdpa-2010::R14 · Regulation 14: personal data systems open to inspection and records producible for each principle →

The data subject may require inaccurate personal data to be corrected, or incomplete data held by the controller to be completed, without undue delay.

federal-decree-law-no-45-of-2021-on-the-protection-of-personal-data-uae-pdpl::15(1) · Article 15(1): right to correct or complete personal data →
PDPA Thailand27 controls

The controller must ensure personal data remains accurate, up to date, complete and not misleading.

pdpa-thailand::S35 · Section 35 Accuracy of personal data →
Rwanda DPL26 controls

The controller or processor must ensure that personal data is complete, accurate, kept up to date and not misleading having regard to the purposes for which it is processed.

rwanda-dpl::15 · Quality of personal data →

Questions people ask about personal data

What is Personal Data?
Any information relating to an identified or identifiable natural person. Under GDPR, this includes names, identification numbers, location data, online identifiers, and factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of a person.
Why is Personal Data important for compliance?
Personal Data is a key concept in Privacy. Understanding personal data helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Personal Data?
Personal Data appears in the requirement text of GDPR, Malaysia PDPA 2010, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), Kuwait CITRA Data Privacy Protection Regulation (Decision No. 26 of 2024), PDPA Thailand. Across these standards we have identified 168 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Personal Data?
Explore our compliance framework pages to see how personal data applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Personal Data applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.