Accuracy and quality

The organization should ensure and document that PII is as accurate, complete and up-to-date as is necessary for the purposes for which it is to be... ... - Licensed content not shown -

GDPR (EU)

5.1.d: Article(5)(1)(d): Personal data shall be: (d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);

LGPD (BRA)

Art.6: The operations of personal data processing must be performed in good faith and follow these principles: I – Purpose: Performing the processing for legitimate, specific, and explicit purposes that the data subject is informed of, without the possibility of further processing in a manner that is incompatible with those purposes; II – Adequacy: Compatibility of the processing with the purposes that the data subject was informed of, according to the context of the processing; III – Necessity: Limitation of processing to the minimum necessary for fulfilling its purposes, using pertinent, proportional and non-excessive data in relation to the purposes of processing; IV – Free Access: Guarantee, to the data subjects, of the ability to easily query free of charge the means and duration of processing, as well as the integrity of their personal data; V – Data Quality: Guarantee, to the data subjects, of accuracy, clarity, relevance, and updating of data, according to the need and to fulfill the purpose of its processing; VI – Transparency: Guarantee, to the data subjects, of clear, precise, and easily-accessible information regarding the processing and the respective processing agents, respecting commercial and industrial secrecy; VII – Security: Use of technical and administrative measures suitable to protect personal data from unauthorized access and accidental or illicit destruction, loss, change, communication, or dissemination events; VIII – Prevention: Adoption of measures to prevent the occurrence of damage as result of the processing of personal data; IX – Non-Discrimination: Impossibility of processing for illegal or abusive discriminatory purposes; X – Liability and Accountability: Demonstration, by the processing agent, that effective measures capable of proving the observance and compliance with personal data protection rules, including the efficacy of these measures, is adopted. Processing of personal data activities must be in good faith and, among others, be for notified purpose(s), necessary and transparent (Art 6) If testing is not...

APP (Australian Privacy Principles)

APP.10: Must take steps to ensure personal information held is accurate, up-to-date and complete (APP 10)

PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada

4.5.2: Must develop guidelines and implement procedures with respect to retention of personal information (4.5.2)

DPP (Data Protection Principles) - Hong Kong

DPP.2: The data user must adopt contractual or other means to prevent data from being kept by data processors longer than necessary Must take all practical steps to ensure personal data is not kept longer than necessary to fulfil the purpose for which it was collected Must take all practical steps to ensure personal data is accurate having regard to the purposes for which it is or is to be used Data user must adopt contractual provisions to prevent personal data being kept longer by data processor than necessary to fulfil the processing (DPP 2)

Personal Data Protection Act - Singapore

S.23: If personal data is likely to be used to make decisions affecting the individual, must make reasonable efforts to ensure that the personal data is accurate and complete

Personal Information Protection Act - South Korea

A.3: Must comply with the Personal Information Protection Principles (A.3)

Turkish Data Protection Law numbered 6698

A.4.2: Personal data may only be processed; (i) for specific, explicit and legitimate purposes, (ii) being relevant with, limited to and proportionate to the puposes for which they are processed. Data processing must be relevant, limited and proportionate to the purposes for which data is to be processed (A.4.2) Personal data processed must be accurate and if necessary, up to date (A.4.2)