The recent case of a couple who are unable to access information about the whereabouts of their missing son raises questions about what exactly constitutes personal data, and how far the protection of that data should go.

While we do not have further information on the circumstances of this case, it all fundamentally comes down to the question: what is personal data, and is there a justification to share it?

Personal data is deliberately broadly defined in the EU. "Personal data" shall mean any information relating to an identified or identifiable natural person. While consent by the data subject is generally an option to overcome data privacy restrictions, it seems as if Matthew Green has not given his consent (yet).