Personal data under GDPR (General Data Protection Regulation) refers to any information that relates to an identified or identifiable natural person. This includes identifiers such as name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.