YOURWORKRIGHTS.UK — REQUEST FOR RECTIFICATION & RESTRICTION OF PROCESSING
(UK GDPR Articles 16 & 18)

Use this template when an organisation holds inaccurate or incomplete personal
data about you, and you want it corrected — and "frozen" while the dispute is
resolved. Send by email to the organisation's Data Protection Officer (DPO) or
privacy contact, and keep a dated copy.

------------------------------------------------------------------------

Subject: Formal Request for Rectification and Restriction of Processing — UK GDPR Articles 16 & 18

Dear [Data Protection Officer / Sir or Madam],

I am writing to exercise my rights under the UK General Data Protection
Regulation (UK GDPR) and the Data Protection Act 2018.

1. REQUEST FOR RECTIFICATION (ARTICLE 16)

The following personal data that you hold about me is inaccurate/incomplete:

[Describe the inaccurate data precisely — e.g., "the incident report dated
14 May 2025 states that I was issued with a verbal warning on 10 May 2025.
This is factually incorrect: no such warning was issued, as confirmed by
[evidence]."]

The accurate information is as follows:
[State the correct information and attach or reference supporting evidence.]

I request that you rectify this data without undue delay, as required by
Article 16 of the UK GDPR.

2. REQUEST FOR RESTRICTION OF PROCESSING (ARTICLE 18)

As I am contesting the accuracy of the personal data described above, I also
request that you RESTRICT the processing of this data under Article 18(1)(a)
of the UK GDPR while its accuracy is verified.

This means the data must be preserved as-is and must not be used, altered,
shared, or deleted until this matter is resolved. Please confirm in writing
that restriction has been applied.

3. NOTIFICATION TO THIRD PARTIES (ARTICLE 19)

If you have disclosed this inaccurate data to any third parties, you are
required under Article 19 to communicate the rectification (and any
restriction) to each recipient, and to inform me of those recipients.

4. PRESERVATION OF EVIDENCE

Please treat this letter as formal notice that this matter is in active
dispute. You are under a duty to preserve all records relevant to it,
including drafts, emails, meeting notes, and system metadata, pending the
outcome of this process and any potential future legal proceedings.

I note that you are required to respond without undue delay. If I do not
receive a satisfactory response, I will escalate this matter to the
Information Commissioner's Office (ICO) within three months of your last
meaningful response, as is my right.

Please confirm receipt of this request in writing, together with a reference
number.

Yours faithfully,

[Your full name]
[Your address]
[Your email]
[Date]
[Employee/payroll number, if applicable]

------------------------------------------------------------------------
PRACTICAL NOTES
- Send to the organisation's DPO or data protection inbox (check their
  privacy policy for the correct address).
- Keep the sent email and any delivery receipt — it starts the clock and
  proves the date.
- You can combine this with a Subject Access Request (see the SAR template)
  to obtain the underlying records first.
- Being treated badly for exercising these rights can amount to an unlawful
  detriment or victimisation — document any retaliation carefully.