Principle Four

The fourth data protection principle is that personal data undergoing processing must be accurate and, where necessary, kept up to date.

The data controller must take steps to ensure the accuracy of personal data. The more important the data, the bigger the steps needed. The data controller must also add a statement to the data if the data subject considers that the data are inaccurate.