Any person (e.g. patient or staff) about whom information is held on one or more of the organisation's systems.

an individual who is the subject of personal data

a person on whom an organisation holds personal information