Comment by Kuinox

7 months ago

> There are people who argue that just the name of a person is PII and they are wrong.

> ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, [...]

https://gdpr.eu/article-4-definitions/

A name is PII, as stated by the definitions in the GDPR.

You're misunderstanding. The name by itself is not personal data, but data connected to a name is.

  • "in particular by reference to an identifier such as a name"

    What is there to misunderstand?

    • If I write a name on a piece of paper here on my desk, I have not violated GDPR. If the radio commentator speaks the name of the soccer player who made a pass, he has not violated GDPR. But there are people who argue that names by themselves (without reference to anything else) are protected personal identification data. Which they clearly are not.

      3 replies →