Before you can understand how data protection applies to your business and day-to-day work, it is important to be aware of the key definitions involved.
Personal data is any information relating to a living person (the data subject) who can be identified from that information. Personal information covers both facts and opinions about the individual.
For example: names, addresses and telephone numbers are obvious identification methods.
Physical descriptions, or CCTV video clips whereby individual physical characteristics are easily recognised, also fall into this category.
Other less direct information, such as unique reference numbers or personal salary information, can also be used to identify a person and so should be treated as personal data.