There could be serious financial, commercial and reputational implications for a business (including possible criminal penalties and fines) if personal data is not handled properly.
Personal data is any information about an individual held on computer or in organised filing systems that could identify the individual, either on its own or together with other information held by a business or a third party. Personal data needs to be protected and kept secure. This data may include name, e-mail address, telephone numbers, date of birth and notes written about someone (such as an annual performance review).
Particular care must be taken with sensitive personal data (for example, medical records) as more restrictive requirements apply to this type of data.