The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Inaccurate or incomplete information

Your organisation has appropriate systems and procedures to change inaccurate information, add additional information to incomplete records or add a supplementary statement where necessary.

Ways to meet our expectations:

  • Your organisation takes proportionate and reasonable steps to check the accuracy of the personal data held and, if necessary, is able to rectify it.
  • If your organisation is satisfied that the data is accurate, you have a procedure to explain this to the individual. You need to inform the individual of their right to complain, and as a matter of good practice, record on the system the fact that the individual disputes the accuracy of the information.
  • If personal data has been disclosed to others, your organisation contacts each recipient to inform them about the rectification, unless this is impossible or involves disproportionate effort.
  • If asked, the organisation tells the data subject which third parties have received the personal data.

Can you answer yes to the following questions?

  • Would staff say there are effective processes in place to rectify inaccurate or incomplete personal data?
  • Would requesters say they were given clear information about the steps you took?