Under GDPR, personal data refers to any information related to an identified or identifiable natural person. This includes names, identification numbers, location data, online identifiers, and factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity. In a nursing context, this also includes health data, which is considered a special category of personal data requiring extra protection.