‘Personal data' means any information which relates to an identifiable living person. A person's name and contact details will be personal data, as will any information relating to their physical appearance, financial circumstances, cultural or social identity, etc. Photographs and online identifiers such as usernames and passwords can also fall within the definition of personal data.
We use personal data in circumstances where:
Some personal data is ‘special'. This means that it relates to a person's racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sexuality or sex life. It also includes genetic data and biometric data. Special personal data is subject to enhanced protection under data protection law.
We use special personal data in circumstances where:
Personal data relating to criminal convictions and children is also subject to enhanced protection.
It is important to note that we do not always require your knowledge or consent to process your personal data.
More guidance on data protection is available on the Information Commissioner's Office's website.