Individuals’ rights as data subjects.
A data subject is any person whose personal data is being collected, held, or processed. A key part of the European Union’s General Data Protection Regulation is letting individuals choose and control what happens to their personal data. Under the GDPR, individuals can ask companies to access and correct errors in their information, delete personal data, and object to processing their data.