You may request to correct an error or omission in the personal data an organisation holds about you. An organisation need not make a correction where it is satisfied on reasonable grounds that a correction should not be made. In this case, the organisation shall annotate the personal data in its possession or under its control with the correction that is requested but not made.
The organisation is generally required to send the corrected personal data to every other organisation to which the personal data was disclosed to within a year before the correction, unless the other organisation does not need the corrected personal data for any legal or business purpose, or if you have consented to the sending of corrected data only to specific organisations.
There are also exceptions to the correction requirement, such as if the personal data is opinion data kept solely for evaluative purposes. The list of exceptions may be found in the
Sixth Schedule of the PDPA.