Skip to content
In force2020 Revised Edition

Part 5 · Access to and Correction of Personal Data

22. Correction of personal data

Feedback & support

In plain English

An individual may ask an organisation to correct their personal data. The organisation must correct the data as soon as practicable, unless it has reasonable grounds not to. It must send the corrected data to organisations that received it within a year before the correction and need it. Any correction not made must be noted on the data.

Summary · Drafted with AI, checked against the official text on 30 Sep 2026.

(1)

An individual may request an organisation to correct an error or omission in the personal data about the individual that is in the possession or under the control of the organisation.

(2)

Unless the organisation is satisfied on reasonable grounds that a correction should not be made, the organisation must —

(a)

correct the personal data as soon as practicable; and

(b)

subject to subsection (3), send the corrected personal data to every other organisation to which the personal data was disclosed by the organisation within a year before the date the correction was made, unless that other organisation does not need the corrected personal data for any legal or business purpose.

(3)

An organisation (not being a credit bureau) may, if the individual consents, send the corrected personal data only to specific organisations to which the personal data was disclosed by the organisation within a year before the date the correction was made.

(4)

When an organisation is notified under subsection (2)(b) or (3) of a correction of personal data, the organisation must correct the personal data in its possession or under its control unless the organisation is satisfied on reasonable grounds that the correction should not be made.

(5)

If no correction is made under subsection (2)(a) or (4), the organisation must annotate the personal data in its possession or under its control with the correction that was requested but not made.

(6)

Nothing in this section requires an organisation to correct or otherwise alter an opinion, including a professional or an expert opinion.

(7)

An organisation is not required to comply with this section in respect of the matters specified in the Sixth Schedule.

Report

Part 6

Care of Personal Data

Part 6A

Notification of Data Breaches

Part 7

Part 8

Part 9

Do Not Call Registry

Part 9A

Dictionary Attacks and Address‑Harvesting Software

Part 9B

Offences Affecting Personal Data and Anonymised Information

Part 9C

Enforcement

Part 9D

Appeals

Part 10

General

Schedules