Your organisation has appropriate systems and procedures to change inaccurate information, add additional information to incomplete records or add a supplementary statement where necessary.
Ways to meet our expectations:
- Your organisation takes proportionate and reasonable steps to check the accuracy of the personal data held and, if necessary, is able to rectify it.
- If your organisation is satisfied that the data is accurate, you have a procedure to explain this to the individual. You need to inform the individual of their right to complain, and as a matter of good practice, record on the system the fact that the individual disputes the accuracy of the information.
- If personal data has been disclosed to others, your organisation contacts each recipient to inform them about the rectification, unless this is impossible or involves disproportionate effort.
- If asked, the organisation tells the data subject which third parties have received the personal data.
Can you answer yes to the following questions?
- Would staff say there are effective processes in place to rectify inaccurate or incomplete personal data?
- Would requesters say they were given clear information about the steps you took?