What constitutes personal data?

GDPR defines protected data as any information relating to an identified or identifiable natural person. Data relating to businesses are not protected. Some data that falls under PII for GDPR include: Name and Address; Economic Data, like income and transactional data; Racial, sexual orientation, and political data; IP address, browser cookie data; and biometric data like fingerprints. Any data that you have that is tied to an individual should be considered protected data.