What does GDPR cover?

The GDPR covers “personal data” which is defined as information relating to an identified or identifiable natural person (e.g., name, ID number, or email address). It also expands the definition of personal data to include the sensitive types of personal data such as data related to race, ethnicity, caste, religion, sexual orientation, political or trade union opinion, etc.
GDPR applies to all organizations that collect the personal data of EU and EEA individuals for offering them goods and services or monitoring their behavior taking place in the EU or EEA.