Legal Register
ACT-12 Tranche 3 (13 May 2027) — Core Operating Cliff
Status: scheduled, not yet operative
Section 12: Correction/completion/update/erasure request within prior-consent including s7(a) scope
Reasoned partial response and propagation are operating recommendations, not verbatim s12(3) duties.
Regulated Actor: Data Principal; Data Fiduciary
Gazette Baseline: Lines 463–476
Statutory Trigger
Correction/completion/update/erasure request within prior-consent including s7(a) scope
Applies to: Data Principal; Data Fiduciary
Substantive Conditions
Correct inaccurate/misleading data; complete and update; erase on prescribed request.
Statutory Exceptions
Retention necessary for specified purpose or compliance with law in (3).
Official Gazette Text (Verbatim Publication)
Ministry of Law and Justice publication, Digital Personal Data Protection Act, 2023.
Right to 12. (1) A Data Principal shall have the right to correction, completion, updating and
correction and erasure of her personal data for the processing of which she has previously given consent,
erasure of
personal data. including consent as referred to in clause (a) of section 7, in accordance with any requirement
or procedure under any law for the time being in force.
(2) A Data Fiduciary shall, upon receiving a request for correction, completion or
updating from a Data Principal,—
(a) correct the inaccurate or misleading personal data;
(b) complete the incomplete personal data; and
(c) update the personal data.
(3) A Data Principal shall make a request in such manner as may be prescribed to the
Data Fiduciary for erasure of her personal data, and upon receipt of such a request, the Data
Fiduciary shall erase her personal data unless retention of the same is necessary for the
specified purpose or for compliance with any law for the time being in force.
Mapped Operational Controls (1)
Enterprise obligations in the Control Master Matrix grounded in this statutory provision.