Data Subject
An identified or identifiable natural person whose personal data is being processed.
Full Definition
Under GDPR and many privacy laws, a 'Data Subject' is the natural person whose personal data is being collected or processed. Data subjects have rights including the right to access their data, right to rectification, right to erasure ('right to be forgotten'), right to restriction of processing, right to data portability, and right to object. Organisations must have processes to respond to data subject rights requests within regulatory deadlines (30 days under GDPR, 45 days under CCPA, 72 hours under DPDP Act in some cases). India's DPDP Act uses the term 'Data Principal' for the same concept.
Related terms
Data Principal
The individual to whom personal data relates, as defined under India's DPDP Act (equivalent to 'data subject' under GDPR).
Right to Access
A data subject's right to obtain confirmation of whether their personal data is being processed and to receive a copy of it.
Right to Erasure
An individual's right to have their personal data deleted ('right to be forgotten') in certain circumstances.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.