Right to Rectification under Article 16 GDPR
What is the Right to Rectification?
The Right to Rectification is governed by Article 16 of the General Data Protection Regulation (GDPR). It gives data subjects the right to request the correction of inaccurate personal data and the completion of incomplete data concerning them.
Scope of the Right to Rectification
The right includes the following aspects:
- Correction of incorrect personal data (e.g. wrong name, address, or date of birth)
- Completion of incomplete personal data, if necessary for processing
- Notification of third parties to whom the data has been disclosed, if rectification has taken place
The controller must promptly carry out the rectification. If the data was disclosed to others, they must also be informed, unless this proves impossible or involves disproportionate effort.
How Can Data Subjects Exercise the Right to Rectification?
The request for rectification can be made in writing, electronically, or orally. Supporting documents (e.g. copies of ID or official documents) may be required.
The controller must respond to the request without undue delay, typically within one month. This period may be extended in justified cases.
The response must be provided in a clear, transparent, and understandable format, in line with Article 12(1) GDPR.
