data subject Within data protection laws the "data subject" is typically the person whose Personally Identifiable Information (PII) is being stored or processed by an organization of some type, known as the "data controller".