The EU does that for them. It's anything that can be traced to an individual. Same goes for 'handling personal information'; it's literally everything you can think of where PI comes into play.