A Data Subject is any identified or identifiable natural person whose personal data is being processed. Under GDPR, data subjects are the individuals whose information is collected and processed by organizations.
Data subjects have specific rights under GDPR, including the right to be informed about processing, access their data, correct inaccurate data, request deletion, and object to processing. Organizations must respect these rights and ensure transparency in their data handling practices.