[F1(1)Any individual (the “objector ”) given—
(a)information under [F2Article 15(1) to (3) of the GDPR (confirmation of processing, access to data and safeguards for third country transfers)] by a credit reference agency, or
(b)information under section 158,
who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it.]
(2)Within 28 days after receiving a notice under subsection (1), the agency shall by notice inform the [F3objector] that it has—
(a)removed the entry from the file, or
(b)amended the entry, or
(c)taken no action,
and if the notice states that the agency has amended the entry it shall include a copy of the file so far as it comprises the amended entry.
(3)Within 28 days after receiving a notice under subsection (2), or where no such notice was given, within 28 days after the expiry of the period mentioned in subsection (2), the [F3objector] may, unless he has been informed by the agency that it has removed the entry from his file, serve a further notice on the agency requiring it to add to the file an accompanying notice of correction (not exceeding 200 words) drawn up by the [F3objector], and include a copy of it when furnishing information included in or based on that entry.
(4)Within 28 days after receiving a notice under subsection (3), the agency, unless it intends to apply to the [F3the relevant authority] under subsection (5), shall by notice inform the [F3objector] that it has received the notice under subsection (3) and intends to comply with it.
(5)If—
(a)the [F3objector] has not received a notice under subsection (4) within the time required, or
(b)it appears to the agency that it would be improper for it to publish a notice of correction because it is incorrect, or unjustly defames any person, or is frivolous or scandalous, or is for any other reason unsuitable,
the [F3objector] or, as the case may be, the agency may, in the prescribed manner and on payment of [F4the prescribed fee], apply to [F3the relevant authority], who may make such order on the application as he thinks fit.
(6)If a person to whom an order under this section is directed fails to comply with it within the period specified in the order he commits an offence.
[F5(7)The [F6Information Commissioner] may vary or revoke any order made by him under this section.
(8)In this section “the relevant authority ” means—
(a)where the objector is a partnership or other unincorporated body of persons, the [F7FCA], and
(b)in any other case, the [F6Information Commissioner].]
Textual Amendments
F1S. 159(1) substituted (1.3.2000) by 1998 c. 29, s.62(2); S.I. 2000/183, art. 2 (with ss. 159, 160)
F2Words in s. 159(1)(a) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 9 (with ss. 117, 209, 210, Sch. 20 para. 50); S.I. 2018/625, reg. 2(1)(g)
F3Words in s. 159(2)-(6) substituted (1.3.2000) by 1998 c. 29, s. 62(3)(a)(b); S.I. 2000/183, art. 2 (with art. 2(2))
F4Words in s. 159(5) substituted (26.7.2013 for specified purposes, 1.4.2014 in so far as not already in force) by The Financial Services and Markets Act 2000 (Regulated Activities) (Amendment) (No.2) Order 2013 (S.I. 2013/1881), arts. 1(2)(6), 20(45)
F5S. 159(7)(8) inserted (1.3.2000) by 1998 c. 29, s. 62(4); S.I. 2000/183, art. 2 (with art. 2(2))
F6Words in s. 159(7)(8)(b) substituted (30.1.2001) by 2000 c. 36, ss. 18(4), 87(2), Sch. 2 Pt. I para. 7 (with ss. 7(1)(7), 56, 78)
F7Word in s. 159(8)(a) substituted (26.7.2013 for specified purposes, 1.4.2014 in so far as not already in force) by The Financial Services Act 2012 (Consumer Credit) Order 2013 (S.I. 2013/1882), arts. 1(1), 7(11)
Modifications etc. (not altering text)
C1Ss. 157-160 applied (1.1.2016) by The Small and Medium Sized Business (Credit Information) Regulations 2015 (S.I. 2015/1945), regs. 1(2), 15(2)