The right to rectification entitles every person to have inaccurate personal data rectified without undue delay and incomplete data completed.
Content of the right
The right concerns statements of fact, such as an incorrect address, an outdated name or an inaccurate payment history. Value judgements and opinions are generally not open to rectification.
Taking into account the purpose of the processing, incomplete data can also be completed by means of a supplementary statement.
Obligations of the controller
Rectification must take place without undue delay. For as long as the accuracy is contested, the data subject can request restriction of processing.
If the data has been disclosed to other recipients, the controller must generally inform them of the rectification.
Legal provisions
- Art. 16 GDPR
- Right to rectification and completion.
- Art. 5(1)(d) GDPR
- Principle of accuracy.
- Art. 18(1)(a) GDPR
- Restriction of processing where accuracy is contested.
- Art. 19 GDPR
- Obligation to notify recipients.