Under GDPR, what can a data subject do if they believe their personal data is inaccurate?
- A.Nothing, as only controllers can modify data, under Article 57(3), which allows a supervisory authority to charge the data subject a fee for handling a complaint
- B.Request rectification of inaccurate personal data
- C.File a criminal complaint only, under Article 12(3), which sets the response deadline for data subject requests at ten business days
- D.Request the data be encrypted instead
Why B is correct
The right to rectification under Article 16 gives data subjects the right to obtain from the controller the rectification of inaccurate personal data without undue delay.
Know someone studying for GDPR? Send them this one.