Under the Israeli Protection of Privacy Law, 5741-1981, data subjects are entitled to request access to personal data related to them. If such data is being held by a third party, for example, a vendor, the company must refer the data subject to the third party, and instruct the third party to provide the data subject with the requested data.
If, after receiving the requested data, the data subject finds the data incorrect, incomplete, unclear, or outdated, the data subject may request to correct or delete such data. If the company corrects or deletes the data, the company must notify any third party holding such data that it must be corrected or deleted in the third party’s records and databases as well.
