It is really interesting the article of Helen Hart called ‘Defining Issues’ (1) about the meaning of personal data. The literal concept given by the DPA (Data Protection Act) 1998 s1 (1) and the European Directive (95/46/EC) art2 can be wider than it is believed. The Information Commissioner’s Office (ICO) reinterpreted the meaning of personal data in order to connect it to the present through the guidance Determining what is Personal Data. This document contains a flowchart, where it can be seen what constitutes personal data for the purposes of DPA. However, the guidance does not cover relevant filling system which should be considered.
It is clear that names or addresses can be personal data because these details give information to us about individuals. However, also some daily activities can become personal data depending on the context.(2) Some information is not personal data; however it can be considered as personal data linked to other information. For instance, medical records are not personal data but, if they are used to hire a person they are personal data. Another example, if your bank statements are used for statistical purposes this is not personal data but if they are used to decide if you can personally assume a bank loan those are personal data. Other details, which can actually be personal data can be employment or criminal records, market value of properties…
As a conclusion, it can be established that data has to be considered personal data when that is used to inform or influence actions or decisions affecting an identifiable individual.
(1)H Hart, ‘Defining Issues’ (2007) 157 NLJ 1450
<http://www.lexisnexis.com/uk/legal/search/journalssubmitForm.do>
(2)Determining what is Personal Data does state that context is important: ICO, ‘Determining what is Personal Data’ (2007) 6