data subject
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
data subject - An identified or identifiable natural person - defined only parenthetically within the definition of personal data, not separately.
In the CIPP/E body of knowledge, data subject comes up under Ch 10.3 - Comparison; Ch 4.2 - Personal data; Ch 4.5-4.6 - Processing & data subject.
data subject in context
- This chapter covers personal data, special-category data, controller, processor, processing and data subject. (Introduction to Data Protection Concepts)
- [[Personal data]] is ==any information relating to an identified or identifiable natural person== (the 'data subject'). (Personal Data and Its Four Building Blocks)
- [[Article 28]] requires a ==written contract== with mandatory terms: process ==only on documented instructions==, confidentiality, Article 32 security, sub-processor conditions, assist with data subject rights and Articles 32-36, ==delete or return== data at the end, and allow ==audits==. (The Processor and the Article 28 Contract)
Where data subject is covered in the CIPP/E study notes
- Personal Data and Its Four Building Blocks
- Processing and Data Subject
- Consent - definition and the four conditions
- Article 33 vs Article 34 - side-by-side comparison
Related terms
- personal data
- Article 29 Working Party
- filing system
- processing
- Article 2
- Consent
- EDPB
- WP29
- Supervisory authority
Test yourself on data subject
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.