Glossary · Data protection
Data Subject
The identified or identifiable individual to whom personal data relates and who holds rights over that data.
Put the term into practice: Data protection management
A data subject is the person whose personal data is being processed. Under the GDPR they hold rights including access to their data, rectification, erasure, restriction, portability, and objection.
Organisations must be able to recognise and respond to data subject requests within set deadlines, which makes handling these requests a core DSMS process.
