A data subject is an identifiable person whose personal data is regulated by the privacy laws for his nation/state. The term data subject was first broadly used in the EU Data Protection Directive of 1995, and is now the foundation for GDPR. In GDPR, data subjects are referred to as individuals (that reside in the EU) while in CCPA they are referred to as California consumers (California residents).
GDPR specifically defines the data subject as: “an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”
Sign up for a demo