Under GDPR, the human individual described by PII. The person the data is about.
Want to actually apply concepts like this instead of just reading definitions?