Your Right to Rectification

As a data subject you have the right to rectification i.e. a data controller must correct any information they hold concerning you which is incorrect.

You might want to do this if you discover through an access request that a data controller doesn’t have a correct record of your address. The organisation should rectify their records “without undue delay”, which is usually taken to mean within one month. If the personal data isn’t corrected within this time they should provide you with a reason why this hasn’t been done.

This right is set out in Article 16 of the GDPR. The full text of this article is at the bottom of this page.

Enforcement in action: In April 2019 the Danish data protection authority ordered a company to modify its IT systems to allow data subjects to exercise their right to rectification.

Where next?

Read more elsewhere

‘My data is incorrect, can I correct it?’, European Commission

‘The right to rectification’, Data Protection Commission of Ireland

‘Examination of Right to Rectification complaints’, Data Protection Commission of Ireland

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Data Protection Fundamentals (basics, definitions and more …)
Your Rights (all your data protection rights: access, information, rectification and more …)
In More Detail (explorations and explanations of data protection concepts …)
Keeping Track (tracking Subject Access Requests and complaints to Supervisory Authorities …)