“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address).
Identification can be directly using the data itself or by combining it with other information which helps to identify a living individual (e.g. a list of staff may contain personnel ID
numbers rather than names but if you use a separate list of the ID numbers which give the corresponding names to identify the staff in the first list then the first list will also be treated
as personal data). The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection
Regulation (the “GDPR) and other legislation relating to personal data and rights such as the Human Rights Act.