Under GDPR, personal data includes any information that can directly or indirectly identify an individual. This encompasses a broad range of data types, including names, identification numbers, location data, and online identifiers. For epidemiologists, this means that health data, genetic data, and biometric data are particularly sensitive and subject to strict regulations.