Before beginning your data mapping exercise, you need to identify the personal data you hold. Personal data is any information that can directly or indirectly identify a natural person. The GDPR (General Data Protection Regulation) places much stronger controls on the processing of sensitive personal data. How to recognise personal data Personal data can be stored digitally or manually and can be used to directly or indirectly identify an individual. Personal data includes: Name; Address; Email address; Photo; IP address; Location data; Online behaviour (cookies); and Profiling and analytics data. How to recognise sensitive personal data Sensitive personal data is a The post How to identify sensitive and personal data appeared first on Vigilant Software - Compliance Software Blog.