ImplementingRegulationPersonalDataProtectionLaw

1- The types of correction of Personal Data referred to in paragraph (2) of Article 17 of the Law include correcting data that is incorrect, completing data that is incomplete, or updating data that is outdated. 2- When correcting Personal Data, the Controller shall comply with the following: a) Ensure the accuracy and integrity of Personal Data by examining and reviewing supporting documents if necessary. b) Notify the parties to whom the Personal Data has been disclosed previously without delay. c) Notify the Data Subject when the correction is completed. d) Document all updates made to Personal Data. 3- If the Controller identifies that Personal Data is inaccurate or incomplete, and that may cause harm to the Data Subject, the Controller shall suspend Processing until the data is updated or corrected. 4- In accordance with paragraph (2) of this Article, when the Controller becomes aware that Personal Data is inaccurate, outdated, or incomplete, the Controller shall take the necessary steps to correct, complete, or update it using the available means without undue delay. 5- The Controller shall take appropriate organizational, administrative and technical measures to avoid the impact of Processing inaccurate, incomplete, or outdated Personal Data, including: a) Develop and update internal policies and procedures in accordance with the provisions of the Law and this Regulation, including procedures that enable Data Subjects to exercise their right to request correction in accordance with the provisions of the Law and this Regulation. b) Periodic review of the accuracy and timeliness of Personal Data. Public