Data Subject

An identified or identifiable natural person whose personal data is processed. Under GDPR and similar laws, the data subject is the individual to whom personal data relates—the person whose privacy is protected. Data subjects have extensive rights including access, rectification, erasure, restriction of processing, data portability, objection, and protection from automated decision-making. The term 'data subject' is technical privacy terminology—in plain language, these are your customers, employees, website visitors, or anyone else whose personal information you handle. Data subjects must be provided with transparent information about data processing, notice of their rights, and mechanisms to exercise rights. Organizations must respond to data subject requests within specified timeframes, verify requester identity, and document how requests were handled. Respecting data subject rights is central to privacy compliance and building trust.