Data concerning a living person who can be identified either from the data itself or from the combination of data with other information
examples: same, address, date of birth, medical history, banking details
sensitive personal data includes: ethnicity, political views, religion and criminal activity