Data protection is not fundamentally a data issue, but a human rights issue. As such, data protection legislations always relate to processing personal information.
To understand your legal data protection obligations, it is necessary to understand what is considered personal data. This is an area that can cause confusion. An individual’s name? That’s certainly personal information. But what about an email address? Or a photograph? Or an ID number that, when combined with other information you hold, could be used to identify someone?