tokens: In fact , this is n't too far off from the official definition of personal data used by the European Union 's General Data Protection Regulation ( GDPR ) , which defines personal data as " any information relating to an identified or identifiable natural person ( ' data subject ' ) " .