Universiteit Leiden

nl en


Personal data better protected after 25 May

22 May 2018

The core concept of the new privacy law General Data Protection Regulation (GDPR) is “personal data”.

More data is privacy-sensitive

Personal data refers to any information that can be traced back to a person. This information could be a name, address or location, but it could also be bank account numbers, telephone numbers or post codes with house numbers.

As of 25 May 2018, personal data also includes cookies, information linked to IP addresses and MAC addresses, so bear in mind that data is now more likely to be sensitive to privacy issues.

Extraordinary (sensitive) personal data

Sensitive information, such as someone’s race, religion or health, is called extraordinary personal data. This data has an extra layer of legal protection.

Working with personal data

Read more about how to work with personal data.

This website uses cookies.  More information.