← GDPR · Data subject rights

Art.16 — Right to rectification

medium data-subject-rightsintegrity

Requirement

Data subjects have the right to have inaccurate personal data corrected, and incomplete data completed, without undue delay.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Required element 1 — any one of
rectif…correctcorrectionupdate theirupdate inaccurateamend
Required element 2 — any one of
inaccurateincompleterequestwithout undue delayself-service
Supporting terms — specificity signals
article 16profile settingsone monthrecipients notifiedsupplementary statement

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.

FrameworkControlTitleShared topics
CCPA/CPRA 1798.106 Right to correct data-subject-rights integrity
CCPA/CPRA 1798.105 Right to delete data-subject-rights
CCPA/CPRA 1798.110 & 1798.115 Right to know and access data-subject-rights
CCPA/CPRA 1798.125 Non-discrimination and financial incentives data-subject-rights
CCPA/CPRA 1798.130(a)(1)-(2) Methods for requests and 45-day response data-subject-rights
CCPA/CPRA Regs (ADMT) Automated decision-making technology for significant decisions data-subject-rights
SOC 2 PI1.1 Quality information about processing objectives and specifications integrity
PCI DSS 4.0.1 6.4.3 Payment page scripts are authorised, inventoried and integrity-checked integrity