The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 16
Right to rectification
Common Questions
Frequently Asked Questions
What actions must be taken if a data subject claims their personal data is inaccurate?
You must promptly rectify inaccurate personal data upon the individual’s request. The GDPR states that you must rectify the data without undue delay.
Can data subjects request the completion of incomplete data?
Yes, if you process incomplete personal data, the individuals involved have the right to request its completion.
Are there fees associated with the rectification of personal data?
Rectification of an individuals personal data must be done free of charge.
What are the steps if a data subject contests the accuracy of data you believe is correct?
Carefully assess any evidence the individual provides to support their claim of inaccuracy. Consider restricting the processing of the disputed data until the disagreement is resolved.
If disagreement persists, inform the individual of their right to challenge the decision and to seek guidance from their data protection authority.
Did we disclose inaccurate data to a third party?
Make sure to inform any third parties who received the inaccurate or incomplete data about the correction. This maintains the integrity of the data across all platforms where it is used or shared.
How to make compliance with Article 16 easier?
It is good practice to proactively encourage data subjects to review their information and notify you of needed corrections. You could do this upon data collection or when they edit their information.
Allow individuals to correct their data themselves where possible, or establish internal procedures for handling rectification requests efficiently and within GDPR guidelines.
Keep records of rectification requests and the corresponding actions taken to demonstrate compliance with the GDPR.
Train your staff on the right to rectification procedures to ensure they understand the importance of this right and are equipped to handle requests appropriately.