Personal Data
Personal Data is information relating to an identified or identifiable person, such as name, contact details, health data, payroll records, identifiers, or online behaviour.
The term matters because digital operations, employee records, customer data, connected devices, and vendor systems can create fast-moving losses that combine technical, legal, operational, and reputational exposure. For example, a ransomware attack could stop operations, expose employee data, trigger notification duties, create forensic costs, and lead to cyber extortion demands or third-party claims. A practical way to read it is to ask: what systems or data are affected, what immediate response costs arise, which regulators or customers must be notified, and whether insurance conditions have been met. The response usually involves legal, IT, communications, HR, and insurance teams working together under tight timelines. . In practice, two policies can use similar wording but produce different outcomes because limits, exclusions, definitions, endorsements, and local law change the final interpretation. When in doubt, the safest approach is to compare the term with the exact contract wording and ask the broker, adviser, insurer, or administrator to confirm how it applies to the specific situation.
How to read it in your program
Where “Personal Data” shows up at VIMA
Pages that explain how this works inside a live employee benefits programme.
Related terms
Terms that often appear alongside “Personal Data” in a policy schedule.