The adage of ‘open data’ is that data are freely accessible as long as “personal data” is secured and does not lead to identification of individuals. Recent developments in Privacy law, such as the passage of the GDPR in Europe, has focussed the attention around the world on the way in which 'personal data' is being currently being managed and shared. This presentation will discuss what is defined as “personal data” under the GDPR, the rights being given to EU residents to control the use of their data and what safeguards (e.g. anonymization) need to be put in place to ensure compliance/accreditation. While not all agricultural data is 'personal data' there is certainly the need for a clearer understanding within the agricultural community of what types of agricultural data may also contain or become 'personal data.' Distinguishing between 'personal data' and non-personal data is an important first step in determining the most appropriate policy, regulatory and practical approach to managing the opening of access to agricultural data in Africa. Understanding what is meant by “personal data” is also necessary to ensure that the risks and benefits of data sharing are fully contemplated, and is needed to build trust in open data systems. Indeed, education and capacity development of small lot farmers is vital so that trust can be developed in the farmer-researcher-donor relationships. Good ag data management practices are integral to the success of open data initiatives in agriculture and nutrition in Africa.