Any information that can identify you, such as your name, email, or your computer's digital address.

Defining Personal Data

This is the official term for any person whose information is being collected or used by a company.

You are the Subject

A controller decides why to collect data, while a processor handles the technical work for them.

Companies must have a valid legal reason to use your data and must treat you fairly while doing so.

Organizations must explain in plain language how they use your data so there are no hidden surprises.

Companies can only collect data for a specific reason and cannot use it for something else later.

Organizations are responsible for making sure the information they have about you is correct and up to date.

Companies should not keep your personal information forever; they must delete it once it is no longer needed.

This involves using technical tools like digital locks and codes to protect your information from hackers.

Organizations must be able to show proof that they are following all the privacy laws correctly.

You must give permission in a way that is easy to understand, usually by clicking a clear 'I agree' button.

You have the right to ask any company for a copy of all the personal information they have about you.

In many cases, you can ask a company to completely delete your information from their systems.

If a company has the wrong details about you, you have the right to ask them to fix those mistakes.

You can request your data in a format that lets you easily move it from one service to another.

If your information is stolen or leaked, the company must tell the authorities and sometimes notify you quickly.

This means companies should think about your privacy from the first day they start building a new app.

Some organizations must hire a special officer whose only job is to make sure data is handled safely.