An organisation, on request by a data subject, must rectify personal data. This Practice Note will provide an overview of the obligations of an organisation with respect to requests by a data subject to rectify their personal data, and how an organisation can refuse to act on such requests.

• ADGM: Abu Dhabi Global Market.

• Data subject: An identified or identifiable living natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

• Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of the processing of personal data.

• Commissioner of Data Protection: The person appointed by the board to be the Head of the Office of Data Protection.

• Court: Any of the courts established pursuant to article 10 of Abu Dhabi Law No. 4/2013 On the Global Marketplace Abu Dhabi.

• DPO: Data protection officer.