People’s rights must apply to any and all data that is generated by and about them, and accumulated and processed by any organisation. This also includes rights over data that is observed, derived, inferred or predicted from data, selves, actions and behaviour.
Data Protection does not address non-personal data. However, using data mining, machine learning and other techniques, it is possible to link disparate pieces of non-personal data to create identifying information.
There needs to be consideration how to protect this data and give individuals rights that apply to any and all data that is generated about them.