Fulfillment of the Right to Rectification of Personal Data, v1.0

Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 16.

Assessment Step

1
Fulfillment of the Right to Rectification of Personal Data (FulfillmentoftheRighttoRectificationofPersonalData)
When the data subject requests it, does the entity, without undue delay, rectify inaccurate personal data concerning the data subject and, taking into account the purposes of processing, complete incomplete personal data, including through a supplementary statement where appropriate?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Fulfillment of the Right to Rectification of Personal Data
The data controller must, without undue delay, rectify inaccurate personal data concerning the data subject upon request. Taking into account the purposes of the processing, the data controller must also complete incomplete personal data, including by means of providing a supplementary statement, where appropriate.
Citation
GDPR
Art. 16, Recital 65