The stakes are high: if the data are not personal data, then the person who controls the data has almost untrammelled power to decide the nature of the processing.
If the data are personal data, that controller would be constrained by the data protection obligations that serve to protect the privacy of the individual user concerned.