14
right to
rectification of
personal data
right to
erasure of
personal data
Data Protection
No. 3
(a) based on consent pursuant to sections 8(2)(a) or 16(1)(a) or
fulfilment of a contractual obligation pursuant to section 8(2)(b);
or
(b) carried out by automated means.
(2) a data controller shall, on request by a data subject—
(a) provide to the data subject personal data of the data subject
in a commonly used and machine-readable format; or
(b) transmit personal data of the data subject directly to another
data controller specified in the request,
within thirty days of receipt of the request.
21.__(1) a data subject has the right to rectify any error in
personal data of the data subject collected by or being processed by
a data controller or data processor.
(2) a data subject has the right to have his or her incomplete
personal data completed.
(3) a data controller or data processor who receives—
(a) a request from a data subject to rectify an error in the
personal data of the data subject; or
(b) supplementary data from a data subject aimed at
completing personal data of the data subject that is incomplete,
shall rectify the error in the personal data or add the
supplementary data to the personal data of the data subject, within
fourteen days of receipt of the request or the supplementary data.
22.__(1) a data subject has the right to erasure of personal data
concerning the data subject, without undue delay, where—
(a) the personal data is no longer necessary in relation to the
purpose for which the data was processed;
(b) the data subject withdraws the consent on which the
processing of the personal data is based and there is no other
legal ground for processing the data;
(c) the data subject objects to the processing of the personal
data pursuant to section 24 and that there is no overriding
legitimate ground for processing the data;
(d) the personal data has been unlawfully processed; or
(e) there is a legal obligation under a written law to erase the
personal data.
(2) a data controller or data processor who receives a request
from a data subject to erase personal data of the data subject in