
Checklist for responding to a request to correct data
- Practical guidance
- Reduces the risk of fines or sanctions
- Helps you comply with UK GDPR obligations
This checklist for responding to a request to correct data sets out the steps to take when an individual asks you to correct inaccurate or incomplete personal data you have about them.
If you receive a request to correct personal data from an individual, you usually have one month to respond.
This checklist sets out a handy summary of the steps to take, as well as links to template letters that can be used in your response.
Q&A
When should I use this document?
Use this checklist for responding to a request to correct data when you receive a request from an individual to correct personal data that you business holds about them.
What does this document cover?
This checklist guides you on the process you should follow when responding to a request to correct personal data, including checking the identity of the individual making the request, and notifying any third parties with whom you have shared the personal data.
Why do I need this document?
As the time frame for responding to a request to correct data is usually one month, it is important that you take all the necessary steps in good time to avoid any potential fines or sanctions.
This guide is a useful reference when making sure you are complying with your data protection obligations.
Where can I find out more?
For further guidance on what to do when you are asked to correct inaccurate personal data, see Requests to correct inaccurate data.
Related Toolkits
Data breach toolkit
Personal data breach policy
Template personal data breach register
Notice of a personal data breach (affected individuals)
- How-to guide: Data breach toolkit
Data protection policy toolkit
- How-to guide: Data protection policy toolkit
Privacy policy
Cookie policy
Data protection policy
Staff privacy notice
Staff recruitment privacy notice
Data subject request policy
Data protection impact assessment policy
Personal data breach policy
Data subject request toolkit
- How-to guide: Data subject request toolkit
Data subject request policy
Subject access request form
Data transfer request form
Request form to correct inaccurate or incomplete data
Request form to delete data
Request form to stop using data
Letter acknowledging receipt of data subject request (and requesting verification of ID)
Letter asking for further information about a data subject request
Letter confirming no data held in response to data subject request
Letter explaining reasons for extension of time to respond to data subject requests
Letter to third party seeking consent to disclosure of information
Subject access request response template
Letter confirming that data processing has ceased
Letter explaining why data processing will continue
Letter confirming that data has been corrected
Letter explaining why data will not be corrected
Letter to party who has been supplied with data to confirm its correction
Letter confirming that data has been deleted
Letter explaining why data will not be deleted
Letter to party who has been supplied data to confirm its deletion
Letter supplying data in response to a portability request
Letter supplying data to a third party in response to a portability request
Small claims toolkit
- How-to guide: Small claims toolkit
Letter before action
Witness statement
Letter of non-attendance for small claims hearing