Correction

The right to correction allows an individual or data subject to request that an organization or data controller rectify inaccurate or misleading personal data, complete incomplete data, or update information that has changed over time. This right helps ensure that the data remaining in the organization's possession is accurate and consistent with the individual's current reality.

To submit a data correction request, individuals typically use the channels designated by the organization, such as a privacy portal, settings menu in an application, or a dedicated email address for privacy queries. The request should clearly identify the specific data that is incorrect and provide the accurate information.

Organizations should verify the identity of the requester and the validity of the new information. Upon verification, they are expected to correct the inaccurate data in their own systems and, where appropriate, communicate these corrections to relevant third parties to whom the data was disclosed so the records can be updated consistently. Maintaining an up-to-date map of where personal data is stored (systems, SaaS apps, and identity stores) helps ensure corrections propagate reliably; WatchDog's Asset Inventory can support that system visibility.

Organizations should respond to and process correction requests without undue delay and within any timelines set by applicable requirements or internal policies. Failure to act within a reasonable timeframe can undermine data correction rights and may trigger escalation through complaint or grievance processes.

Generally, objective personal data that is factually inaccurate, incomplete, or outdated can be corrected. This includes names, contact details, account information, financial records, and employment history. Subjective data, such as an opinion or assessment, may not always be subject to correction unless the underlying facts are shown to be incorrect.

If an organization disputes a correction request because it believes the current data is accurate, it should document the reasons for its decision. Good practice may include noting the individual's contestation in the record (where feasible) while the dispute is reviewed, and requesting verifiable evidence to support the proposed change.

Organizations should maintain a log of correction requests, including the date received, the identity of the requester (or account reference), the specific data challenged, the verification steps taken, the action taken (correction or refusal), and the date of resolution. This documentation helps demonstrate accountability during audits or investigations. If supporting documents are exchanged to validate a correction, they should be shared via a secure channel with clear access controls and an audit trail; WatchDog's Secure File Sharing can help support that workflow.

Data correction is a primary mechanism for maintaining data quality. By allowing individuals to fix errors, organizations help keep their records accurate, reliable, and up-to-date. High data quality reduces operational risks, such as shipping errors or billing mistakes, and supports fair outcomes when decisions are made using personal data.