Data Subject
An individual whose personal data is collected, held, or processed, particularly relevant in the context of data protection laws like GDPR.
Definition
Any identifiable person (customer, employee, patient) whose data rights—access, correction, deletion, portability—must be honored under privacy regulations. Data-subject governance includes workflows to validate identity, process data-subject requests within statutory timeframes, and maintain audit logs of all actions taken on an individual’s data.
Real-World Example
After a user requests “right to be forgotten” under GDPR, a telecom provider’s privacy team verifies the user’s identity, deletes all associated call-detail records and billing data, and logs the deletion. They confirm compliance within the mandated one-month timeframe, documenting the process for regulatory audits.
.svg)
