Data Subject
What is Data Subject?
An identified or identifiable natural person whose personal data is being processed. Under GDPR, data subjects have extensive rights including access, rectification, erasure, and portability.
Terms that appear alongside data subject
Each of these is named in at least one of the same controls as data subject. The number is how many controls name both.
- data subject rights 209 shared controls
- consent 203 shared controls
- gdpr 146 shared controls
- data protection 82 shared controls
- lawful basis 75 shared controls
- compliance 66 shared controls
- automated decision making 57 shared controls
- transparency 52 shared controls
Frameworks that govern data subject
What the standards actually require on data subject
Requirements naming data subject across 6 standards, quoted from the control text.
The controller must give information and communications concisely, intelligibly and in clear language, in general in the same form as the request, facilitate the rights, reply in writing without undue delay, act free of charge (with a fee or refusal only for m...
albania-law-no-124-2024-on-personal-data-protection::54 to 55 · Articles 54 and 55: modalities for rights and information to data subjects in law enforcement →As far as possible the controller clearly distinguishes suspects, persons about to offend, convicted persons, victims or likely victims, and other persons such as witnesses, informants and contacts.
germany-federal-data-protection-act-bdsg::s72 · s 72 Distinguish between categories of data subjects →No data may be obtained unless the specific purpose of collection is made known to the data subject.
nigeria-data-protection-regulation-ndpr::2.3(1) · Tell the data subject the specific purpose before obtaining data →The controller must notify data subjects without delay, and within 3 working days of learning of the risk, of a breach that creates a risk to their fundamental rights and freedoms, with the same contents as the notice to the Authority, in clear and simple lang...
ley-org-nica-de-protecci-n-de-datos-personales-lopdp::46 · Art. 46 and RGLOPDP Art. 28: breach notification to data subjects within 3 days →Where a breach is likely to result in a high risk to individuals the controller must tell the data subjects without undue delay, in clear and plain language, with the nature of the breach, the contact point, likely consequences and measures taken.
uk-gdpr-uk-general-data-protection-regulation::Art.34 · Article 34 Communication of a personal data breach to the data subject →The data subject has the right to easy access to information about the processing of their data, provided clearly, adequately and ostensibly, covering at least: the specific purpose;
lgpd::Art.9 · Art. 9: Information the data subject is entitled to receive →Questions people ask about data subject
What is Data Subject?
Why is Data Subject important for compliance?
Which compliance frameworks address Data Subject?
Where can I learn more about Data Subject?
See how Data Subject applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.