What is a data subject?

A data subject refers specifically to the individual whose personal information is collected, stored, or processed by an organization. This term is central to data protection laws, such as the General Data Protection Regulation (GDPR) in the European Union, which emphasizes the rights of individuals regarding their personal data. Understanding this concept is crucial as it establishes that individuals have rights over how their personal data is used, including the right to access, rectify, or delete their information.

The other options refer to different roles in the data management ecosystem. The entity that collects data, for instance, is typically an organization that gathers information from data subjects but does not define who the data subject is. Similarly, the organization that processes data may include various operations on data but does not inherently convey the identity of the individual to whom the data relates. As for the regulatory body, it oversees compliance with data protection laws but does not relate directly to the concept of a data subject. Therefore, the definition that best aligns with the concept of a data subject is indeed the individual about whom the data is stored.