Under GDPR, personal data refers to any information related to an identified or identifiable natural person. This includes data such as names, identification numbers, location data, online identifiers, and factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person. In epidemiology, personal data could include health records, genetic information, and other sensitive data.