The concept of ‘personal data’ is very broad. There are many types of personal data. It centres on the issue of whether the data can be used to identify a natural person. Obvious personal data include a person’s name, (email) address and place of residence. But telephone numbers and postcodes with house numbers are also personal data. Sensitive data such as somebody’s race, religion or health are also referred to as sensitive personal data. These must have particular protection in law. This could include other common (sources of) personal data, such as an HR files, internet profiles, copies of identification documents, customer numbers, registration numbers, bank account numbers, dates of birth, etc.