Last reviewed on 4 April 2018
School types: All · School phases: All
Ref: 32593

The world of data protection is filled with jargon and technical terms. Our GDPR glossary makes it accessible for you.

GDPR The General Data Protection Regulation. The law that governs data protection across Europe. It came into force in May 2018. The Data Protection Act 2018 The law that sets out how specific aspects of the GDPR apply in the UK.  Personal data The GDPR only applies to organisations' use of personal data. This is any information relating to an identified, or identifiable, person. This may include information such as the person's: Name Contact details Identification number Online identifier, such as a username It may also include anything relating to the person's physical and mental health, genetics, finances, or their physiological, cultural, or social identity. Special categories of personal data Personal data which is more sensitive and so needs more protection. It includes information about a person's: Racial or ethnic origin Political opinions Religious or philosophical beliefs Trade union membership Genetic information Biometrics (such as fingerprints, retina and iris patterns), where used for identification purposes Health – physical or mental Sex life or sexual orientation It also includes information that reveals any of the above characteristics