Right to rectification

People have a right to rectification. This means that they can ask organisations to rectify (amend) their personal data if they are incorrect. For example, after they have made a request to an organisation for access and discovered that their data are incorrect. Or incomplete. In that case, they can ask the organisation to adjust or supplement their data.

Are the data that an organisation uses of someone incorrect? Then this may have unpleasant consequences for this person. That is why organisation are responsible for ensuring that the personal data they process are always correct. And they have to update the data if necessary.

On this page

When rectification is and is not possible

People can ask for rectification in one of the following situations:

  • their personal data are incorrect;
  • their personal data are incomplete.

People cannot obtain rectification if they disagree with an impression, opinion or conclusion of an employee of the organisation. What they can do in this case is ask the organisation to add their written opinion to their file.

Asking for rectification

Do you want to have your personal data at an organisation amended of supplemented? Then you indicate in an email or a letter to this organisation which amendments or additions you want. You can use the rectification example letter of the Dutch Data Protection Authority for your request.

 

At Using your privacy rights, you can read about what to do if you want to ask for rectification. And what you can expect from the organisation then. For example: the organisation has to verify your identity first.

Response to a request

The organisation has to give a response to your request within 1 month.

  • Does the organisation decide to amend or supplement your data? Then the organisation will have to do this as soon as possible. That is within 1 month at the latest.
  • Does the organisation refuse your request? Then the organisation will have to let you know why. Read what you can do if you do not agree with the refusal.
  • Does the organisation not respond within 1 month? Read what you can do if the organisation does not respond.

Informing other organisations

Has the organisation adjusted or supplemented your personal data? And did the organisation pass on your (incorrect) data to another organisation in the past year? Then the organisation will also have to pass on the amendments to these other organisations as soon as possible.

Do you want to know who the organisation has informed about the rectification of your data? Then you can ask the organisation. The organisation is obliged to answer your question.

Rectification of a public register

Are your personal data in a register that is open to the public by law, such as the Land Registry or the Commercial Register (of the Chamber of Commerce)? Then you cannot use the right to rectification as set out in the privacy law.

This is because there are statutory provisions about rectification of data in such a public register. You can ask the keeper of the register how you can have your data rectified.

For organisations: right to rectification in practice

Do you, as an organisation, receive a request for rectification? Take a look at For organisations: privacy rights in practice to see what you have to do to handle the request in accordance with the rules (among other things: verify the requester's identity, reply period).