The individual whose personal data is being collected, stored, or processed.
A data subject is the living individual whose personal data is being processed. Data subjects have rights under GDPR—access to their data, correction of inaccuracies, erasure in certain circumstances, portability, and objection to processing. Organisations must be able to respond to data subject requests within one month. Understanding your data subjects—customers, employees, contacts—helps ensure their rights are respected.
Why It Matters
The DSC Perspective:
Data subjects have enforceable rights. Be prepared to respond to data subject access requests (DSARs) within legal timeframes. Know who your data subjects are and what data you hold about them.