Who is referred to as a data subject?

A data subject is an individual whose personal data is processed by a data controller or processor. This definition is widely adopted in privacy laws such as the General Data Protection Regulation (GDPR), which establishes the rights and protections afforded to individuals regarding their personal information. The primary focus is on the individual themselves, which highlights the importance of consent, transparency, and the individual’s right to access and control their data.

Understanding the role of the data subject is crucial in the context of privacy compliance as it underscores the need for organizations to ensure that personal data is handled lawfully, fairly, and transparently, respecting the rights of individuals. This concept helps promote responsible data practices and strengthens privacy rights in various jurisdictions.