GDPR Article 4(14): personal data resulting from specific technical processing relating to physical, physiological or behavioural characteristics that allows unique identification of a person. Special category data under Article 9, requiring explicit consent or another Article 9(2) condition before processing.