UK GDPR explained
The Right to Rectification: Fixing Inaccurate Data About You
When an organisation holds something wrong about you, UK GDPR gives you a direct way to ask for it to be corrected or completed. Here is how the right works and how to use it calmly.
In short
The right to rectification (UK GDPR Article 16) lets you ask any organisation holding inaccurate personal data about you to correct it, and to complete data that is incomplete. You make the request, the organisation must respond within one month, and correction is usually free of charge.
What the right to rectification actually covers
The right to rectification is set out in Article 16 of the UK GDPR. It gives you the ability to ask an organisation that holds personal data about you to correct anything that is factually inaccurate, and to complete anything that is incomplete where that incompleteness makes the record misleading. It is one of the most practical of the data-protection rights because the situations it addresses are everyday ones: a misspelt name, an old address still treated as current, a wrong date of birth, or a record that has simply fallen out of date.
It is worth being clear about what 'inaccurate' means here. The UK GDPR treats data as inaccurate if it is incorrect or misleading as to a matter of fact. That focus on fact matters. The right is strongest when the issue is a verifiable error, such as a transposed digit in a reference number, rather than a difference of opinion or an assessment you disagree with. Where a record reflects a judgement or an opinion, an organisation may decline to change the underlying view, though you can usually ask for a note recording that you contest it.
Because the threshold is factual accuracy, this is generally a high-value, low-friction right to exercise. You are not asking an organisation to delete a record or to stop using it altogether; you are asking it to hold a more accurate version. That is often an easier request for an organisation to agree to than an erasure request, which is part of why rectification is a sensible first step when something looks wrong.
- Correcting data that is factually wrong, such as a misspelt name or an out-of-date address
- Completing data that is incomplete in a way that makes the record misleading
- Adding a statement that you dispute a record where the organisation maintains its accuracy
How to ask for a correction, step by step
You do not need a special form or a lawyer to exercise this right. A rectification request can be made verbally or in writing, to any part of the organisation. That said, putting it in writing and keeping a copy gives you a clear record of what you asked for and when, which helps if you need to follow up. The clearer and more specific your request, the faster an organisation can act on it.
The most useful requests identify the exact field that is wrong, state what the correct value should be, and where possible point to evidence. If you are asking to correct an address, for example, attaching or referencing a document that shows the right one removes any doubt and lets the organisation update the record with confidence. You are entitled to ask for the correction free of charge in ordinary circumstances.
Once you have made the request, the organisation generally has one calendar month to respond. It can extend this by up to two further months for complex requests, but it must tell you within the first month if it intends to do so and why. If it corrects the data, it should also, where appropriate and reasonably possible, let any other organisation it shared the data with know about the change so the correction propagates.
- Identify the specific data that is inaccurate or incomplete, and what the correct value is
- Make the request in writing where you can, and keep a dated copy for your records
- Include or reference supporting evidence so the organisation can verify the correct value
- Note the one-month response window and ask to be kept informed if it is extended
What to expect, and what to do if it is refused
An organisation will not always agree that the data is inaccurate. Where it is satisfied the record is correct, or where the dispute is really about an opinion rather than a fact, it may decline to change it. If it does, it must tell you why, and it must explain that you can complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, and that you may be able to seek a remedy through the courts. A reasonable middle path that organisations often take is to add a note to the record showing that you contest its accuracy.
While a rectification request is being considered, you also have a related right to ask the organisation to restrict its processing of the disputed data, broadly meaning it stores the data but pauses other uses until accuracy is resolved. That can be a useful, calm holding step if the consequences of the data being wrong are immediate. It keeps the record in place while the question of accuracy is worked out.
Rectification often works best alongside a subject access request. Seeing the full picture of what an organisation holds about you can reveal exactly which fields are wrong and give you the specifics to correct them. The two rights complement each other: access shows you the data, and rectification fixes it. This article is general information about how the right to rectification works under UK GDPR and is not legal advice; for guidance on your own situation, consider the ICO's published resources or a qualified adviser.
Frequently asked questions
Is the right to rectification the same as having data deleted?
No. Rectification asks an organisation to correct or complete inaccurate data so it holds a more accurate version, while the right to erasure asks it to remove the data altogether. They are separate rights under the UK GDPR, and correction is often a more proportionate first step when a record is simply wrong rather than unwanted.
How long does an organisation have to respond?
Generally one calendar month from receiving your request. For complex requests this can be extended by up to two further months, but the organisation must tell you within the first month if it is extending and explain why.
Can I be charged for a correction?
In ordinary circumstances a rectification request is free. An organisation may only charge a reasonable fee, or refuse, where a request is manifestly unfounded or excessive, and if it does so it must be able to justify that decision.
What if the organisation refuses to make the change?
If it is satisfied the data is accurate it can decline, but it must explain why and tell you about your right to complain to the Information Commissioner's Office and to seek a court remedy. It will often add a note showing that you dispute the record.
Related terms
This is general information, not legal advice. For guidance on your own situation, consider speaking with a qualified professional.
Reviewed by OSINTA's founding lawyer — 2026-06-27.
Know what an organisation holds, then fix what is wrong
Rectification is most powerful when you can see your data first. A subject access request gives you that picture, and OSINTA helps you understand your own digital footprint so you can decide what to ask for next.