An identified or identifiable individual whose personal data is processed. In privacy frameworks (e.g., GDPR and state privacy laws), data subjects may have rights (access, deletion, correction, objection, portability, etc.), and organizations typically implement processes to respond to those rights.
See: Personal data; Privacy