The identified or identifiable individual to whom personal data relates and who holds rights over that data.
A data subject is the person whose personal data is being processed. Under the GDPR they hold rights including access to their data, rectification, erasure, restriction, portability, and objection.
Organizations must be able to recognize and respond to data subject requests within set deadlines, which makes handling these requests a core DSMS process.
Related frameworks
KaitoSec