Correctierechten

Correctierechten, in Dutch data protection terminology, refer to the rights individuals have to have incorrect or incomplete personal data corrected in records held by organizations or on platforms. These rights are most commonly known as the right to rectification and are a core element of data governance and information accuracy.

In the European Union, the right to rectification is provided by the General Data Protection Regulation (GDPR), particularly Article 16. The regulation obliges data controllers to rectify personal data without undue delay and to ensure that such corrections are reflected in all processing systems. When feasible, corrections should also be propagated to third-party recipients who have received the data. The right applies to data that is inaccurate, incomplete, or no longer up to date, and it can cover data processed automatically or stored in various formats.

Scope and application include personal data that a person has supplied, data generated from their interactions, and, in some cases, content about them that is publicly displayed or accessible. The right is typically exercised by submitting a request to the data controller or processor, who must verify the individual’s identity and assess the accuracy of the data. If correction is accepted, the organization must implement it and inform relevant recipients. If a full correction is not possible, the organization may offer restrictions on processing or attach a note indicating a dispute.

Timing and limitations: authorities generally require a response within one month, with possible extensions. There are exceptions when correction would conflict with legal obligations, public interest, or freedom of expression. In the Netherlands, the Authority for Personal Data (Autoriteit Persoonsgegevens) oversees compliance and handles complaints related to rectification rights.