According to the General Data Protection Regulation (GDPR), the term "data subjects" refers to individuals who are identified or identifiable by personal data. In other words, data subjects are the living individuals to whom the personal data being processed relates. It includes any information that directly or indirectly identifies a person such as a name, an ID number, location data, or via factors specific to the person's physical, physiological, genetic, mental, economic, cultural or social identity.
The following categories could be considered as data subjects
Customers and Clients: Individuals who are customers or clients of businesses, organizations, or service providers.
Employees: Workers and job applicants of companies who have their personal data processed for HR and employment-related purposes.
Website Visitors: Individuals who visit websites or use online services that collect their data through cookies or similar technologies.
Subscribers: People who subscribe to newsletters, mailing lists, or other communication channels.
Patients: Individuals whose personal data is processed by healthcare providers.
Students: Individuals attending educational institutions whose data is processed for administrative and educational purposes.
App Users: Individuals who use mobile applications or software that collect their personal data.
Social Media Users: Individuals who use social media platforms and have their data processed by those platforms.
Members of Organizations: Individuals who are members of clubs, associations, or other types of organizations.
Public Officials: Data subjects may also include public officials, as their personal data can be subject to processing for various purposes.
Source: GDPR