Under Article 5,1 (d) of the GDPR regulations, https://gdpr-info.eu/ Personal data shall be:
Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
Article 16 states:
1The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. 2Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 19 states:
1The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 2The controller shall inform the data subject about those recipients if the data subject requests it.
Also view the ico guidance to the GDPR, https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-r... under Accuracy and Right to rectification.
The ico guidance also states that
You must act upon the request without undue delay and at the latest within one month of receipt.
You should calculate the time limit from the day after you receive the request (whether the day after is a working day or not) until the corresponding calendar date in the next month.
You can make a complaint to the ico here: https://ico.org.uk/make-a-complaint/your-personal-information-concerns/personal-information-concerns...
It's What I Do.
I Drink and I
Remember Things.