It seems that no one can agree on the exact meaning of ‘personal data’. Despite guidance issued by the Article 29 Working Party and national regulators, many practical difficulties remain. The European Commission is proposing changes to the definition in the new Regulation. This Workshop looks at key principles, including: What constitutes ‘personal data’ in a normal business context The latest guidance on ‘personal data’ The significance of the definition of ‘personal data’ when responding to requests for information Controversial aspects of the definition, including relevant filing systems and IP addresses The meaning of anonymisation and pseudo-anonymisation Proposed changes to European law