---
title: "Art. 16 GDPR: Right to rectification"
canonical: "https://dposchool.com/gdpr/article/16"
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#art_16"
source_note: "Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Art. 16 GDPR · Chapter III: Rights of the data subject · Section 3: Rectification and erasure

# Article 16 GDPR: Right to rectification

Text as of 28 October 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

## Summary (not the official text)

The data subject has the right to have inaccurate personal data rectified without undue delay, and incomplete data completed, including by means of a supplementary statement.

## Official text

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

## Source

Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

[Article 16 on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#art_16)

Text as of 28 October 2026.

This is reference material, not legal advice.

## Related recitals

This list is under review.

- [Recital 65](https://dposchool.com/gdpr/recital/65)

## Court of Justice judgments

### [C-247/23, VP v Országos Idegenrendészeti Főigazgatóság](https://dposchool.com/gdpr/case/c-247-23)

Judgment of 13 March 2025 · ECLI:EU:C:2025:172

A public register must rectify inaccurate data on a person's gender identity; reasonable evidence may be required, but not proof of gender reassignment surgery.

[CURIA](https://curia.europa.eu/juris/liste.jsf?num=C-247/23&language=en) · [EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0247)

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Chapter III](https://dposchool.com/gdpr/chapter/3) / Article 16

Previous: [Art. 15 GDPR: Right of access by the data subject](https://dposchool.com/gdpr/article/15)

Next: [Art. 17 GDPR: Right to erasure (‘right to be forgotten’)](https://dposchool.com/gdpr/article/17)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents