§ 23 — Accuracy of personal data

23. An organisation must make a reasonable effort to ensure that personal data collected by or on behalf of the organisation is accurate and complete, if the personal data —(a)

is likely to be used by the organisation to make a decision that affects the individual to whom the personal data relates; or

(b)

is likely to be disclosed by the organisation to another organisation.