Who is the entity identified by personal data?

The data owner is the entity (e.g., an organization) that has ultimate responsibility for the data, its accuracy, and its protection.

The data processor is an entity that processes personal data on behalf of the data owner, following their instructions.

The data custodian is responsible for the safe custody, transport, and storage of the data, as well as its implementation and maintenance of controls.

In data privacy and security contexts, the 'data subject' is the individual to whom personal data relates and who can be identified from that data. Regulations like GDPR specifically define data subject rights, emphasizing that the personal data identifies a living individual.