The accuracy principle of the General Data Protection and Validation Regulation is not widely publicized, as the CNIL's publications on the subject are relatively discreet.Â
Yet, like all the principles of the RGPD, it conditions business compliance. Neglecting it means running the risk of colossal fines that can reach 20 million euros or 4% of sales.
RGPD: understanding the principle of accuracy
The fourth principle of the RGPD refers to theaccuracy and timeliness of personal data collected by companies. It implies that:Â
- Personal data is accurate and, if necessary, kept up to date
- Any data that is inaccurate in relation to the purposes for which it is processed is deleted or rectified.
This principle applies throughout the data's lifecycle, from collection (e.g. contact form) to processing for marketing, commercial or administrative purposes.
As a reminder, and in accordance with the fifth principle of the RGPD, companies must limit the retention of personal data collected to:Â
- Three years in the case of data on inactive persons in the database. To keep them longer, they must be rigorously anonymized.
- 13 months before requesting the explicit consent of data subjects (via cookies)
- If the data subject exercises his or her right of access, the company is required to respond within one month, with a tolerance period of two months if the request is complex. To find out more, please consult the CNIL fact sheet on this subject.
In line with the principle of accuracy, companies are therefore required to ensure the reliability of the personal data they collect. Data validation solutions help to ensure compliance in this area.
Data validation and the RGPD principle of accuracy
Data validation solutions, whether mobilized in real time for information to be collected or curatively for existing databases, promote companies' compliance with the RGPD principle of accuracy.
- Real-time data validation
Real-time data validation enables companies to comply with the RGPD's principle of accuracy by verifying the data at the moment it is entered, whether in a lead generation form, an app or any other means of collection.
In concrete terms, when a user fills in an online form, the real-time data validation solution immediately checks the accuracy of each field. It can, for example, confirm the validity of an email address, the format of a telephone number or the veracity of a zip code. If errors are detected, the user is immediately prompted to correct them.Â
To put it plainly, only data that is correct (in form) is recorded, in line with the RGPD's principle of accuracy.
- Validation of curative data
This approach involves analyzing and correcting the data already stored in the company's systems to ensure that it remains accurate, up-to-date, in the right format and compliant with the purposes for which it was collected.Â
A batch data validation solution, for example, will scan DBs to identify inconsistencies, duplicates and obsolete or inaccurate information. It will reveal, for example, incorrect telephone numbers, incorrectly formatted or non-existent postal addresses, duplicate entries or missing data.Â
Once these problems have been identified, the solution will start cleaning, correcting and, if necessary, enriching the DB from reliable, verified sources.
This Data Quality Management practice responds directly to the RGPD's principle of accuracy, since it enables companies to rectify or delete inaccurate data and update obsolete information.Â
💡 The right to data rectification |
The right to rectification, enshrined in Article 16 of the GDPR, is a direct consequence of the principle of accuracy. It gives individuals the right to demand that organizations processing their personal data correct any inaccurate information about them without delay. The CNIL stipulates that " any person may have information concerning him or her rectified, completed, updated, locked or erased where errors, inaccuracies or the presence of data whose collection, use, communication or storage is prohibited have been detected ". Data validation solutions, whether real-time or curative, enable companies to ensure their compliance with this obligation. |
Data Enso, helps you comply with the RGPD
Implementing a Data Quality strategy means preventing the heavy penalties provided for in the event of a breach of the RGPD: up to €20 million or 4% of worldwide sales.
To enable you to master your data capital and mobilize it in the service of your performance, we offer reliable, intuitive solutions for cleansing, formatting and enriching your databases, whether in real time or curatively. Test our solution for free!Â