Right of Rectification.

The GDPR right of a data subject to obtain from the controller, without undue delay, the correction of inaccurate or incomplete personal data concerning them. It belongs to the Privacy & Data Protection category of cybersecurity.

The GDPR right of a data subject to obtain from the controller, without undue delay, the correction of inaccurate or incomplete personal data concerning them.

The right of rectification is established in Article 16 of the European Union General Data Protection Regulation (GDPR). It gives any data subject the right to obtain from the data controller, without undue delay, the correction of inaccurate personal data concerning them and the completion of incomplete data, including by providing a supplementary statement. Controllers must respond within one month, extendable by two additional months for complex requests, and must communicate corrections to each recipient with whom the data has been shared. The right also implies a controller obligation to maintain accuracy under the data-quality principle of Article 5 and to demonstrate compliance under accountability.

Defences for Right of Rectification typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: GDPR Article 16, Right to rectification.