(1) Any individual (the "objector") given -
(a) information under Article 15(1) to (3) of the UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) by a credit reference agency, or
(b) information under section 158,
who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it.
(2) Within 28 days after receiving a notice under subsection (1), the agency shall by notice inform the objector that it has-
(a) removed the entry from the file, or
(b) amended the entry, or
(c) taken no action,
and if the notice states that the agency has amended the entry it shall include a copy of the file so far as it comprises the amended entry.
(3) Within 28 days after receiving a notice under subsection (2), or where no such notice was given, within 28 days after the expiry of the period mentioned in subsection (2
…