What is Right to Rectification?
The right to rectification allows individuals to request that an organization correct inaccurate personal data or complete incomplete personal data held about them.
The right to rectification, established under Article 16 of the GDPR, gives data subjects the right to obtain from the controller the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by providing a supplementary statement.
When a controller rectifies data that has been disclosed to recipients, it must communicate the rectification to each recipient unless this proves impossible or involves disproportionate effort. The controller must also inform the data subject about those recipients if requested. Similar rights exist in other regulations, including the CCPA/CPRA right to correct and the DPDPA right to correction.
Accurately fulfilling rectification requests requires organizations to identify all locations where the inaccurate data is stored and propagate corrections across all systems. DiscoverIQ maintains a comprehensive data map to ensure corrections reach every relevant system, while ComplyIQ tracks request fulfillment to ensure timely compliance.
Relevant Regulations
How IQWorks Helps
Related Terms
Data Subject Rights (DSR)
Data Subject Rights are the legal rights granted to individuals under data protection laws, enabling them to control how their personal data is collected, used, stored, and shared by organizations.
Right of Access
The right of access grants individuals the ability to obtain from an organization confirmation of whether their personal data is being processed and to receive a copy of that data along with key details about the processing.
Data Subject
A data subject is an identified or identifiable natural person whose personal data is being collected, held, or processed by an organization.
Data Mapping
Data mapping is the process of identifying and documenting how personal data flows through an organization, including where it is collected, stored, processed, shared, and eventually deleted.