You must promptly rectify inaccurate personal data upon the individual’s request. The GDPR states that you must rectify the data without undue delay.

Yes, if you process incomplete personal data, the individuals involved have the right to request its completion.

Rectification of an individuals personal data must be done free of charge.

1. Carefully assess any evidence the individual provides to support their claim of inaccuracy.
2. Consider restricting the processing of the disputed data until the disagreement is resolved.
3. If disagreement persists, inform the individual of their right to challenge the decision and to seek guidance from their data protection authority.

Make sure to inform any third parties who received the inaccurate or incomplete data about the correction. This maintains the integrity of the data across all platforms where it is used or shared.

It is good practice to proactively encourage data subjects to review their information and notify you of needed corrections. You could do this upon data collection or when they edit their information.

Allow individuals to correct their data themselves where possible, or establish internal procedures for handling rectification requests efficiently and within GDPR guidelines.

Keep records of rectification requests and the corresponding actions taken to demonstrate compliance with the GDPR.

Train your staff on the right to rectification procedures to ensure they understand the importance of this right and are equipped to handle requests appropriately.