10.
(1) Pursuant to section 40 of the Act, a data subject may request a data controller or data processor to rectify their personal data, which is untrue, inaccurate, outdated, incomplete or misleading.
(2) A request for rectification may be made in Form DPG 3 set out in the First Schedule.
(3) An application for rectification of personal data may be supported by such documents as may be relevant to the rectification sought.
(4) A data controller or data processor shall within fourteen days of the request, rectify an entry of personal data in the database where the data controller or data processor is satisfied that a rectification is necessary.
(5) Where a request for rectification is declined, a data controller or data processor shall, in writing, notify a data subject of that refusal within seven days and shall provide reasons for refusal.
(6) A request for rectification shall made free of charge.
