A data controller shall take all reasonable steps to ensure that personal data in his or her possession —
(a) remains accurate; and
(b) is kept up-to-date where such personal data requires regular updating.