GDPR
Chapter III - Rights of the Data Subject

GDPR GDPR-Art.16: Right to rectification

On request, rectify inaccurate personal data concerning the data subject without undue delay, and, having regard to the purposes of the processing, complete incomplete personal data, including by means of the data subject providing a supplementary statement.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 53 controls across 41 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CCPA/CPRA · 3 controls

  • 1798.106(c) Correct inaccurate personal information
  • CCR 7023 Assess and handle correction requests, documentation and denials
  • §1798.106 Right to Correct Inaccurate Personal Information
  • AUCDR-PS-11 Privacy Safeguard 11 - Quality of CDR data
  • AUCDR-PS-13 Privacy Safeguard 13 - Correction of CDR data
  • APP-10 APP 10 - Quality of personal information
  • APP-13 APP 13 - Correction of personal information

ISO 27701:2019 · 2 controls

  • 7.3.6 Access, correction and/or erasure
  • 7.4.3 Accuracy and quality

NIST SP 800-53 Rev 5 · 2 controls

  • NIST800-PM-22 PM-22 Personally Identifiable Information Quality Management
  • NIST800-SI-18 SI-18 Personally Identifiable Information Quality Operations

SOC 2 · 2 controls

  • SOC2-P5.2 P5.2 Correction of personal information
  • SOC2-P7.1 P7.1 Quality of personal information
  • UZB-DPL-07 Data Accuracy and Quality
  • UZB-DPL-10 Data Subject Rights

APPI · 1 control

  • APPI-A34 Request for Correction, Addition or Deletion
  • MALABO-Art19 Data Subject Right of Rectification and Erasure
  • AL-DPA-8 Right of Rectification and Erasure
  • AO-PDPL-8 Right of Rectification, Erasure and Blocking
  • MYHR-GOV-5 Retention, destruction and correction obligations of the System Operator
  • AT-DSG-11 Sections 42-45 - Data subject rights (law enforcement)
  • AZ-DPA-7 Article 7 - Rights of the data subject

Bahrain PDPL · 1 control

  • BH-PDPL-07 Right to rectification of inaccurate data
  • BB-DPA-11 Section 11 - Right to Rectification

Canadian PIPEDA · 1 control

  • CAYDPA-s14 Rectification, Blocking, Erasure or Destruction (s.14)
  • CSL-Art43 Right to Correction and Deletion - Art. 43
  • PIPL-Art46 Right to Correction and Completion
  • CCM-DSP-11 Personal Data Access, Reversal, Rectification and Deletion
  • CDR-PS-13 Privacy Safeguard 13: Correction of CDR Data
  • CZ-110-§28-29 Prava subjektu udaju v trestnim rizeni (access, rectification, erasure under LED)
  • ESRB-PC-12 Parental access, review and deletion rights
  • EGY-PDPL-Art.2 Data subject rights and consent requirement
  • UAE-PDPL-Art.11_12_13_14_15_16 Data subject rights (UAE PDPL Articles 11-16)
  • s58 s 58 Rectify, erase or restrict on request, inform recipients and give written reasons for refusals
  • 11.9 11.9 Deletion or rectification of wrong or improper data

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Chapter III - Rights of the Data Subject

You are reading one control. How much of GDPR have you already done?

GDPR GDPR-Art.16 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of GDPR your existing evidence covers. Hold ISO 27701:2019 and 21 of 41 GDPR controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO 27701:2019 pair alone.

Query this from an agent

The graph holds this control, the 53 it maps to, and the evidence behind each claim, over MCP and REST.