gdpr
Is user opinion personal infotmation according to gdpr?
<p>If I ask user to enter their faviourite laptop and transmit that information am I being GDPR non-compliant?Basically is user opion voluantarily given and o;ptional PII under GDPR</p>

<p>Personal data is any information relating to an identified or identifiable person (Art 4(1) GDPR). It is not necessary that the personal data is in itself identifying. PII is an US concept that has <em>nothing</em> to do with GDPR.</p>
<p>An opinion of a person clearly relates to that person, thus processing someone's opinions is likely to be processing of personal data. This would clearly be the case if the opinion is stored in a database and associated with an user ID that serves as an identifier.</p>
<p>Even without such an identifier, it may be possible to use contextual information to indirectly identify the person. When analyzing identifiability, we must consider all methods that would reasonably be available to you. Note that identification under GDPR doesn't mean “tying to a real-world identity” but also “singling out”. Thus, even pseudonymous data is personal data.</p>
<p>Therefore: you should assume that any user-related data is personal data, unless you are very sure that you have no reasonable means to identify them (i.e. that the data is truly anonymous).</p>
<p>When you process personal data and fall under the GDPR's territorial scope, your processing will need to comply with the GDPR. This involves among other things a legal basis such as valid consent.</p>

<blockquote>
<p>If I ask user to enter their faviourite laptop and transmit that information am I being GDPR non-compliant?</p>
</blockquote>
<p>Transmitting only the user's favorite laptop (be it type, brand, model, or other characteristics) does not violate the GDPR because that information definitely neither identifies nor helps identifying a natural person.</p>
