Article 4: Definitions
GDPR Art. 4, Chapter I
For the purposes of this Regulation: (1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to t
1325 words in the official text.
Sits inside (1)
Cites (2)
Defines (26)
- personal data
- processing
- restriction of processing
- profiling
- pseudonymisation
- filing system
- controller
- processor
- recipient
- third party
- consent
- personal data breach
- genetic data
- biometric data
- data concerning health
- main establishment
- representative
- enterprise
- group of undertakings
- binding corporate rules
- supervisory authority
- supervisory authority concerned
- cross-border processing
- relevant and reasoned objection
- information society service
- international organisation
Recitals matched by wording (33)
- Recital 2
- Recital 3
- Recital 5
- Recital 7
- Recital 9
- Recital 14
- Recital 15
- Recital 22
- Recital 24
- Recital 26
- Recital 29
- Recital 30
- Recital 31
- Recital 32
- Recital 34
- Recital 35
- Recital 36
- Recital 37
- Recital 41
- Recital 43
- Recital 54
- Recital 64
- Recital 67
- Recital 71
- Recital 72
- Recital 75
- Recital 79
- Recital 124
- Recital 131
- Recital 147
- Recital 154
- Recital 161
- Recital 173
These recitals name no article. The dataset matched them to this one by text similarity, and they are marked so nobody reads a match as a citation.
Source texts: the Official Journal, through the Publications Office. Dataset built 2026-07-29. Study aid, not legal advice.
Every connection on this page is drawn from the official text of Regulation (EU) 2016/679. Study aid, not legal advice.
See how GDPR sits beside the other three acts on the crossover map, or find what your role must do in the obligations checklist.