19. Right to correction. – Where— (a) a data controller has supplied a copy of the personal data in compliance with the data access request under section 16 after which the requestor considers that the personal data is inaccurate, incomplete, misleading, or not up to date; or (b) the data subject knows that his personal data held by the data controller is inaccurate, incomplete, misleading, or not up to date, therefore, the requestor or data subject may make a data correction request in writing to the data controller to make the necessary correction. (c) Where a data controller has shared the data with another data processor or a controller, the data controller possessing the consent of the data subject shall be liable under Section 19. 20. Compliance with a data correction request. – (1) Subject to sub-sections (2), (3), and (5) and section 19, where a data controller is satisfied that the personal data to which a data correction request relates is inaccurate, incomplete, misleading, or not up to date, he shall, not later than thirty days from the date of receipt of the data correction request— (a) make the necessary correction to the personal data; (b) supply the requestor with a copy of the corrected personal data; and (c) subject to sub-section (4), where— (i) the personal data has been disclosed to a third party during the twelve months immediately preceding the day on which the correction is made; and (ii) the data controller has no reason to believe that the third party has ceased to use the personal data for the purpose for which it was disclosed to the third party and therefore, shall take all practicable steps to supply the third party with a copy of the corrected personal data along with a written notice stating the reasons for the correction. (2) A data controller who is unable to comply with a data correction request within the period specified in sub-section (1) shall before the expiration of that period— (a) by written notice to inform the requestor and the Commission that he is unable to comply with the data correction request within such period and the reasons for his 22