Which types of data can be stored under GDPR?

Which types of data can be stored under GDPR?

• A. Online behaviour, name, address, phone number, email, medical conditions, training records, travel preferences, and location data
• B. Only financial data
• C. Public records
• D. Employee salaries and payroll data

Answer: (A)

GDPR applies to personal data, meaning any information that relates to an identified or identifiable person. This includes obvious details like name, address, phone number, and email, but also broader data such as online behavior, location data, and travel preferences. Medical conditions are included (with extra protections as special category data), and training records are tied to a person, so they’re covered too. Because all of these pieces of information can identify someone, they can be stored and processed under GDPR when you have a lawful basis and appropriate safeguards. Limiting the scope to only financial data, public records, or payroll misses the wide range of personal data GDPR governs, which also includes the items listed above.

GDPR applies to personal data, meaning any information that relates to an identified or identifiable person. This includes obvious details like name, address, phone number, and email, but also broader data such as online behavior, location data, and travel preferences. Medical conditions are included (with extra protections as special category data), and training records are tied to a person, so they’re covered too. Because all of these pieces of information can identify someone, they can be stored and processed under GDPR when you have a lawful basis and appropriate safeguards. Limiting the scope to only financial data, public records, or payroll misses the wide range of personal data GDPR governs, which also includes the items listed above.