The obligation sits with the holder
Under the Privacy Act, an APP entity must give you access to the personal information it holds about you (APP 12) and must correct it where it is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13). That duty is on them, not on a middleman.