Personal data under GDPR includes any information that can identify an individual, either directly or indirectly. This includes names, email addresses, IP addresses, and even cookie data. Essentially, if the data can trace back to an individual, it falls under GDPR regulations.