# Standards and Regulatory References

## Primary Legislation

### GDPR (Regulation (EU) 2016/679)
- **Article 16** — Right to rectification
- **Article 19** — Notification obligation regarding rectification or erasure
- **Article 5(1)(d)** — Accuracy principle: personal data must be accurate and up to date
- **Article 12** — Transparent communication and modalities
- **Article 18(1)(a)** — Right to restriction while accuracy is contested
- **Recital 65** — Right to rectification linked to accuracy obligation

### UK Data Protection Act 2018
- **Section 46** — Right to rectification (law enforcement processing)

## Regulatory Guidance

### European Data Protection Board (EDPB)
- **Guidelines 01/2022 on data subject rights — Right of access** (adopted 28 March 2023): Addresses the interplay between the right of access and rectification, clarifying that access responses must be based on accurate data.
- **Guidelines on Transparency under Regulation 2016/679 (WP260 rev.01)** (adopted 11 April 2018): Guidance on communicating rectification outcomes transparently.

### Information Commissioner's Office (ICO) — United Kingdom
- **Right to rectification guidance** (updated 2024): Practical guidance on verifying corrections, handling disputes about accuracy, and managing the Art. 19 notification obligation.

## Technical Standards

### ISO/IEC 27701:2019 — Privacy Information Management
- **Section 7.4.3** — Correction and amendment of PII: establishes controls for implementing rectification within a PIMS framework.

### ISO 8000-61:2016 — Data Quality
- Provides a framework for measuring and managing data accuracy, applicable to the verification step of rectification processing.