Data is considered personal if it can identify a specific individual or make them identifiable, either directly or indirectly, regardless of its source or format.
Data That Directly Identifies an Individual
• Full name and national ID or residency permit number.
• Student or employee identification number.
• Facial images and visual or audio recordings that identify the individual.
• Mobile phone number, personal email address, and home address.
• Signature, bank account numbers, and credit card details.
Data That May Indirectly Identify an Individual
• Date of birth, gender, nationality, and workplace.
• Academic or employment records and attendance information.
• Geographic location, device address, and system identifiers.
• A combination of attributes that, when linked together, could reveal an individual’s identity.
Sensitive Personal Data
• Racial or ethnic origin and religious, intellectual, or political beliefs.
• Security and criminal data.
• Health and genetic data.
• Biometric data used for identification.
• Data indicating that an individual has one or both parents unknown.
Important Notice
Removing a person’s name alone does not make the data anonymous, as other details may still allow the individual to be re-identified.