The definition of personal data is broad and covers any information from which a person (data subject) can be identified or potentially identified. This includes cookies, IP addresses, geolocation and data that has been encrypted, de-identified or pseudonymized but could be used to re-identify an individual.