Accuracy of personal data
23.  An organisation shall make a reasonable effort to ensure that personal data collected by or on behalf of the organisation is accurate and complete, if the personal data —
(a)is likely to be used by the organisation to make a decision that affects the individual to whom the personal data relates; or
(b)is likely to be disclosed by the organisation to another organisation.