The living individual whom the personal data is about — the person the GDPR is designed to protect.
The data subject is the identified or identifiable natural person that personal data relates to — a customer, employee, user or website visitor.
The GDPR gives every data subject enforceable rights over their data, including access, rectification, erasure, restriction, portability and objection.
In the Regulation
Related terms
Personal dataAny information relating to an identified or identifiable living person, from a name or email to an IP address or location data.Subject access requestA request from an individual to see the personal data an organisation holds about them — usually answered within one month.Right to erasureThe data subject's right to have their personal data deleted in certain circumstances.
Need this applied to your business?
Our data-protection lawyers turn GDPR terms into a working plan.