Under data protection law, there are two main types of personal data: personal data and information, and special category data. Personal data refers to any data about an identifiable individual, including facts and opinions about them. Special category data includes more sensitive personal data, such as racial or ethnic origin, political opinions, religious beliefs, health data, and biometric data.