What is a 'Data Subject'?

GDPR Definition

Article 4 of the GDPR describes ‘personal data’ to mean any information relating to an identified or identifiable natural person (‘data subject’).

A data subject is an identifiable natural person is one who can be identified, directly or indirectly.

The definition provides the following non-exhaustive list of identifiers:

• a name

• an identification number

• location data

• an online identifier

• one or more factors specific to the identity of that natural person:

  • physical

  • physiological

  • genetic

  • mental

  • economic

  • cultural

  • social