Under GDPR, personal data is any information relating to an identified or identifiable person. IP addresses, click IDs, cookie identifiers and user IDs are generally treated as personal data.
Why It Matters
Personal data needs a legal basis, a defined purpose and a retention limit. Analytics collects more of it than most teams assume.