Data Subject Consent Forms for Corrections

Version1.0
Effective DateApril 2026
Review CycleAnnual
Document OwnerChief Information Security Officer (CISO)
ClassificationCONFIDENTIAL — Internal Use Only
Applicable StandardSOC 2 Type II

1. Purpose

This document provides the standard form and confirmation process used when a data subject provides explicit consent or confirmation for the correction or amendment of their personal information held by DCKAP. While most corrections are actioned on the basis of the right to rectification (not requiring separate consent), certain amendment scenarios — particularly those involving sensitive updates or third-party notification — are documented here.

2. When This Form is Used

ScenarioConfirmation Required?Reason
Standard account detail correction (name, phone)No — actioned on right to rectificationGDPR Art. 16; no consent needed
Email address changeYes — email verification tokenSecurity: prevents account takeover
Correction with third-party notificationYes — data subject to confirm scope of notificationEnsures data subject controls who is informed
Correction of data shared in an integration log annotationYes — data subject acknowledges audit log limitationAudit log immutability explanation needed
Correction by authorised representative on behalf of data subjectYes — written confirmation from data subject AND representativeDual authority required

3. Data Correction Confirmation Form

This form is used where explicit confirmation from the data subject is required before DCKAP actions a data correction.

Section A — Data Subject Details

Full Name________________________________________________
Email Address________________________________________________
DCKAP Account ID / Reference________________________________________________
Correction Request Reference Number________________________________________________

Section B — Details of Correction to be Confirmed

Data Element to be Corrected________________________________________________
Current (incorrect) Value________________________________________________
Corrected (new) Value________________________________________________
Reason for Correction (optional)________________________________________________

Section C — Third-Party Notification Consent (if applicable)

If DCKAP has shared your data with third parties, we may be able to notify them of the correction. Please indicate your preference:
[ ] Yes — please notify all third parties with whom my data has been shared of this correction[ ] No — please correct my data in DCKAP’s records only[ ] Notify specific parties only (list): ________________________________

Section D — Declaration and Confirmation

I confirm that the correction described above is accurate and that I authorise DCKAP to update my personal data accordingly.

Signature:________________________
Date:________________________
Relationship to data (self / representative):________________________

4. Record Keeping

  • Completed confirmation forms are retained for 2 years from the date of the correction.
  • Forms are stored in the privacy request register alongside the correction request record.

5. Placement in Product

Product LocationScreen / PageAudience
Product PortalSettings → My Data → Confirm Correction (triggered by workflow)Portal Users
Email WorkflowSent by privacy@dckap.com when confirmation is requiredData Subjects
Internal WikiLegal → Privacy Ops → Correction Confirmation FormsPrivacy Team
Compliance FolderSOC 2 Evidence → Data Subject RightsExternal Auditors