Which of the following is considered Personal Data under GDPR?

Question

Options

• AThe birth date of an unidentified user.
• BAn individual's address including their first and last name.
• CThe name of a deceased individual.
• DA company's registration number.

• A
  3% (1)
• B
  89% (32)
• C
  6% (2)
• D
  3% (1)

Explanation

Option B is correct because GDPR defines personal data as any information relating to an identified or identifiable natural person - a name combined with an address directly identifies a specific living individual, meeting this definition exactly.

Why the distractors fail:

• A - A birth date alone, without any link to an identified person, cannot identify anyone on its own; context is required for data to qualify as personal.
• C - GDPR explicitly protects living individuals only; data relating solely to deceased persons falls outside its scope.
• D - A company registration number identifies a legal entity, not a natural person, so it is not personal data under GDPR.

Memory tip: Think "GDPR = Living + Identified." If the data can point to a specific living human being, it's personal data. If the person is dead, unknown, or is a company, GDPR doesn't apply.

No community discussion yet for this question.