Correcting inaccuracies and errors is another privacy risk, according to a department assessment.