I'm not a lawyer, but my understanding is that anything that identifies consumer or group of consumers falls under GDPR. General Data Protection Regulation, it

I'm not a lawyer, but my understanding is that anything that identifies consumer or group of consumers falls under GDPR. General Data Protection Regulation, it's not only about personal information, but what data is collected by companies, who has access to it and why/how is it processed.