Right of correction

(a) Dispute by individual A covered entity shall make available a reasonable mechanism by which an individual may dispute the accuracy or completeness of personal information linked to such individual that is maintained by such covered entity if such information is processed in any way, by such covered entity, a third party of such covered entity, or a service provider of such covered entity that may increase reasonably foreseeable significant privacy harms. (b) Correction by covered entity A covered entity receiving a dispute under subsection (a) shall— (1) correct or complete (as the case may be) the disputed information and notify such individual that the correction or completion has been made; or (2) notify such individual that— (A) the disputed information is correct or complete; (B) such covered entity lacks sufficient information to correct or complete the disputed information; or (C) such covered entity is denying the request for correction or completion in reliance on an exemption or exception provided by section 109(g). (c) Small businesses excluded This section does not apply to a small business.