A living individual about whom a data controller (www.practicallaw.com/A34798) holds personal data (www.practicallaw.com/A34796). A data subject need not be a UK national or resident provided that the data controller is subject to the UK Data Protection Act 1998.