CyberCode.ph · Philippines

Right to Correct Personal Data Under the Data Privacy Act

Last updated September 3, 2026 · Practical privacy, cybersecurity and technology-law guidance

Last materially reviewed: September 2, 2026

Direct Answer

Under the Philippine Data Privacy Act, a data subject has the right to dispute inaccuracies or errors in personal data and have the Personal Information Controller correct them within a reasonable period. This is commonly called the right to rectification.

The right does not replace court-ordered or other official correction processes when another law requires a competent court or government agency to make the change.

Primary authority: National Privacy Commission — Right to Rectify.

Key Takeaways

  • You can dispute inaccurate or erroneous personal data held by a company.
  • Make the correction request in writing and identify the specific error.
  • Provide supporting documents where appropriate.
  • A request may be denied if it is manifestly unfounded, vexatious, or unreasonable.
  • Some official records require a separate legal or government correction process.

Jump to a Section

  1. When to request correction
  2. How to request rectification
  3. When a request can be denied
  4. Court or government corrections

When Should You Use the Right to Rectify?

Use rectification when an organization holds personal data about you that is inaccurate or erroneous—for example, an incorrect contact detail, account profile, employment record, customer record, or other data that the organization itself is legally able to correct.

Decision Snapshot

Situation Best route
Wrong phone number in a customer account Request rectification
Incorrect address in a private-company file Request rectification
Official civil-registry record requiring legal process Follow the applicable government or court process
You do not know what data is held Exercise right of access first

How to Request Correction

  1. Contact the company or its Data Protection Officer.
  2. State that you are exercising your right to rectification under the Data Privacy Act.
  3. Identify the inaccurate data precisely.
  4. State the correct information.
  5. Attach supporting records if needed.
  6. Ask for written confirmation once the correction is completed.

Can a Company Refuse?

Yes. NPC guidance recognizes that a rectification request may be denied when it is manifestly unfounded, vexatious, or otherwise unreasonable. The company should evaluate the request fairly and document its response.

What If the Correction Requires a Court or Government Order?

The NPC expressly notes that the right to rectification does not include situations where correction requires an order from a competent court, another government agency, or an official process under another law.

Related Guides

To see what data is held first, read Right to Access Personal Data. For the broader rights framework, see Data Privacy Rights in the Philippines.

Frequently Asked Questions

Can I ask a company to correct inaccurate personal data?

Yes. Data subjects have the right to dispute inaccuracies or errors and request correction, subject to the circumstances and applicable law.

What should I include in a correction request?

Identify the inaccurate data, explain what is wrong, provide the corrected information, and attach supporting evidence where appropriate so the organization can verify the requested change.

Official Sources