35. Compliance with data correction request

Subject to other rules, a data user satisfied that personal data is inaccurate, incomplete, misleading or not up-to-date must correct it within twenty-one days of receiving the correction request. Sometimes it must take all practicable steps to send a corrected copy, with written reasons, to a third party given the data in the twelve months before the correction.

Summary · Drafted with AI, checked against the official text on 30 Sep 2026.