________
________
________
________
________
Dear ________,
FORMAL REQUEST FOR RECTIFICATION OF PERSONAL DATA UNDER ARTICLE 16 OF THE UK GDPR
I am writing to exercise my right to rectification of personal data in accordance with Article 16 of the UK General Data Protection Regulation ("UK GDPR"), as supplemented by the Data Protection Act 2018. The particulars of my request are set out below.
1. Identity of the Data Subject
I am the data subject to whom this request relates. To enable you to locate my records and verify my identity, I provide the following details:
1.1 Full name
________
1.2 Date of birth
________
1.3 Address
________
1.4 Other identifying reference(s) (e.g. account, customer or reference number, if any)
________
1.5 Proof of identity
Please find enclosed by way of verification of my identity: ________
2. Particulars of the Request
This request concerns the personal data identified below.
2.1 Inaccurate data
The following personal data held by you is inaccurate, incomplete or misleading:
________
2.2 Correction required
I request that the above data be rectified so as to read as follows:
________
2.3 Evidence in support
Where relevant, I enclose the following documentation evidencing the correct position: ________
3. Legal Basis of the Request
3.1 You are the controller in respect of my personal data within the meaning of Article 4(7) of the UK GDPR and, accordingly, are subject to the obligations imposed by the UK GDPR and the Data Protection Act 2018 in relation to its processing.
3.2 Under Article 16 of the UK GDPR, I have the right to obtain without undue delay the rectification of inaccurate personal data concerning me and, taking into account the purposes of the processing, to have incomplete personal data completed, including by means of providing a supplementary statement.
3.3 I draw your attention to the accuracy principle in Article 5(1)(d) of the UK GDPR, which requires that personal data be accurate and, where necessary, kept up to date, and that every reasonable step be taken to ensure that inaccurate data is erased or rectified without delay.
3.4 Section 205(1) of the Data Protection Act 2018 defines "inaccurate", in relation to personal data, as incorrect or misleading as to any matter of fact.
3.5 Pursuant to Article 19 of the UK GDPR, you are required to communicate any rectification of my personal data to each recipient to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort, and to inform me of those recipients if I so request.
Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat nulla pariatur lorem ipsum dolor sit amet consectetur adipiscing elit.
Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat nulla pariatur lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris.
4. Action Requested
In light of the above, I require that you:
4.1 rectify the inaccurate personal data as specified at paragraph 2.2 above without undue delay;
4.2 communicate the rectification to each recipient to whom my personal data has been disclosed, in accordance with Article 19 of the UK GDPR; and
4.3 confirm to me in writing once the above steps have been completed, and provide the identity of any such recipients.
If you are unable to comply with my request, please provide me with a written explanation setting out the reasons for your refusal and inform me of my right to lodge a complaint with the Information Commissioner's Office (ICO) and to seek a judicial remedy under section 167 of the Data Protection Act 2018.
I look forward to receiving your response within one month of receipt of this request, as required under Article 12(3) of the UK GDPR. Should you require any further information from me in order to deal with this request, please do not hesitate to contact me using the details set out above.
Yours faithfully,
________
Signature: ________
Date: ________
Enclosures: ________