SUMMARY - What Counts as Personal Data
A person's name and address are obviously personal data deserving protection. But what about an IP address that could theoretically identify them but usually does not? A cookie ID tracking browsing across websites? Aggregated statistics showing that people in a neighborhood tend to shop at particular stores? An inference that someone is likely pregnant based on purchase patterns, even if no pregnancy-related information was directly collected?