Right to Correct

The consumer right under CCPA/CPRA to request correction of inaccurate personal information maintained by businesses, codified in Section 1798.106. When consumers assert inaccuracy, businesses must use commercially reasonable efforts to correct the information, taking into account the nature of the personal information and purposes for which it is processed. Organizations must respond within 45 days (extendable by 45 additional days with notice) and verify the requestor's identity. This right parallels GDPR's rectification right but uses different terminology. Businesses should establish processes for receiving correction requests, investigating accuracy claims, making appropriate updates across systems, notifying service providers and contractors to correct information in their systems, and documenting correction decisions. Unlike deletion requests, correction requests require businesses to maintain the data but ensure accuracy. Organizations may deny requests if they have reasonable belief the information is accurate, but should document their reasoning and inform the consumer.