A data subject is an individual (natural person) whose personal data is collected, held, or processed by an organisation.
Under GDPR and other related laws, data subjects have specific rights regarding their personal data, including the right to access, correct, and request the deletion of their data.