Agentic AI Reference Architecture

Governance & Compliance · Human role

Data Subject

Human roleGovernance & ComplianceSafety, Security & Governancearc:DataSubject

The identified or identifiable individual whose personal data an organization or AI system collects or processes, and who holds rights to access, rectify, erase, port and object to processing.

Responsibility. Exercises data-protection rights and grants or withdraws consent.

Also known as: Customer, Patient, Applicant, Employee, EU resident, Loan applicant

receives data frominvokesreceives data fromreceives data frominvokesDecision Factor Explainer: receives data fromDecision Factor ExplainerDecision Appeal Service: invokesDecision Appeal ServicePersonal Data Breach Notifier: receives data fromPersonal Data Breach Not…Personal Data Exporter: receives data fromPersonal Data ExporterPrivacy Portal: invokesPrivacy Portal
Direct neighbourhood (hover for relationship types)

Relationships

invokes dependency

receives data from dynamic

Classification

Frameworks & regulations
GDPRCCPA

Sources

  1. Ch9.7: T. Nguyen, "GDPR and Data Protection Regulations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.7. ISBN: 9798244538229.
  2. Ch10.5: T. Nguyen, "Human-over-the-Loop," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 10.5. ISBN: 9798244538229.
  3. Ref9.05: "Privacy and Data Protection for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/05-Privacy-Data-Protection.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note