Right of Rectification

The data subject right to have inaccurate personal data corrected and incomplete data completed, guaranteed under GDPR Article 16. This right ensures data quality and prevents harm from incorrect information affecting individuals' interests. Organizations must respond to rectification requests without undue delay and within one month (extendable by two additional months for complex requests). When data is rectified, controllers must notify recipients unless impossible or disproportionately difficult, giving individuals meaningful control over their data's accuracy across the processing ecosystem. The right applies to factual data but not matters of opinion or judgment. Organizations should verify identity, assess validity, investigate accuracy claims, and implement corrections across all systems including backups and copies provided to third parties. Similar rights exist under CCPA/CPRA as the 'right to correct' inaccurate personal information. Businesses should establish processes for receiving requests, determining appropriate corrections, updating records, and documenting decisions, especially for disputed corrections.