Any information relating to an identified or identifiable person?such as name, ID number, IP address, or location data?falls under GDPR. This broad definition triggers legal obligations on holders of such data, requiring accountability and protection measures.
