Accuracy of data
The personal data being processed must be accurate and up to date. Inaccurate personal data must be rectified or erased without delay.
The controller must confirm the accuracy of the personal data being kept by it. The verification of accuracy is particularly important when decisions significant to the individual are made on the basis of the personal data. Inaccurate data can pose a serious risk to the rights of the data subject. For example, inaccurate health data in patient records can lead to errors in treatment.
The more vital the accuracy of the data, the more measures are required from the controller to ensure its accuracy. The controller must have procedures in place for the regular evaluation of the accuracy of data and for making the required updates. Data subjects usually also have the right to assess the personal data being processed by the controller and request the rectification of inaccurate data and the erasure of unnecessary data.
If the controller discloses the personal data being kept by it to third parties, it should keep a record of the recipients. The controller has an obligation to inform each recipient to whom personal data has been disclosed of any rectifications to the personal data. This obligation can be waived only when its fulfilment would be impossible or would require unreasonable effort. Data subjects also have the right to request information on the recipients of their personal data.
When personal data is received from another controller, a note of the source must be made on the personal data received. Thus, information on any inaccuracies can be transmitted to the original source if necessary.