Standard 4 per Section 22 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be accurate and + where necessary + kept up to date. The fourth Data Protection Standard requires data quality + accuracy + currency + and provides data subjects with the right to seek rectification. (1) Accuracy Definition: (a) factually correct + complete; (b) up-to-date as needed by the purpose; (c) NOT misleading by omission; (d) traceable to authoritative sources where available; (e) free from systematic bias. (2) Reasonable Steps Standard: (a) controller must take reasonable steps to ensure accuracy; (b) reasonableness depends on (i) purpose (high-stakes decisions require higher accuracy); (ii) nature of data; (iii) cost of accuracy measures; (iv) consequences of inaccuracy. (3) Source Verification: (a) data from trustworthy sources; (b) primary source preferred over secondary; (c) source acknowledged in data lineage; (d) controls for data acquired from third parties (must accuracy still be controller's responsibility?). (4) Rectification Right per Section 38: (a) data subject right to rectification of inaccurate personal data; (b) data subject right to completion of incomplete personal data; (c) controller MUST act on rectification request within 30 calendar days (Section 37 timelines); (d) extensions of up to 60 days where complex + with notification to data subject; (e) refusal must be reasoned + appealable to OIC; (f) free of charge except where manifestly unfounded or excessive. (5) Erasure Right per Section 39 (Right to be Forgotten): (a) data subject right to erasure of inaccurate or unlawful or unnecessary personal data; (b) grounds including (i) no longer necessary; (ii) consent withdrawn; (iii) objection upheld; (iv) unlawful processing; (v) legal obligation; (vi) child consent revocation; (c) controller MUST erase within 30 days; (d) notification to recipients of erasure; (e) restricted by legal preservation requirements + freedom of expression. (6) Correction Procedures: (a) Data Subject Access + Correction Portal; (b) Verification of data subject identity for SAR/Correction; (c) Internal correction workflow + audit trail; (d) Downstream propagation of corrections to data warehouses + analytics + ML models + reports + sub-processors + recipients; (e) Backup correction (recommended though complex). (7) Quality Assurance: (a) Data Quality Metrics - completeness + accuracy + consistency + timeliness + uniqueness + validity; (b) Data Quality Tools - profiling + validation + cleansing + matching + standardisation; (c) Master Data Management (MDM); (d) Data Stewardship + Data Owner roles; (e) Periodic Quality Audits. (8) Special Cases: (a) Statistical + Research Data per Section 41 - special rules; (b) Historical/Archival - permanent record balanced with data subject rights; (c) Public Authority records - statutory retention vs accuracy; (d) Legal Documents - immutability vs correction marginal. (9) Children + Sensitive Data: enhanced accuracy obligations + faster correction timelines (recommended within 7 days for children). (10) Penalties for Inaccuracy: (a) Section 50 administrative penalties; (b) Section 52 civil compensation if material damage or distress; (c) reputational + regulatory consequences. Coordinates with EU GDPR Article 5(1)(d) + Article 16 + Article 17 + UK DPA 2018 + Convention 108+ Article 5(4)(d) + ISO/IEC 27701 + DAMA-DMBOK data quality + Jamaica Section 37-39 + Section 25 ROPA + Jamaica Constitution Charter Section 13(3)(j). Jamaica DPA 2020 Standard 4 + Section 22 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.