Under GDPR principles, one of the key obligations for companies is to ensure that the personal data they hold is accurate and up to date. Therefore, contacting the client to verify or update their personal data is not only allowed but encouraged under GDPR. This aligns with the GDPR's accuracy principle, which states that personal data should be accurate and, where necessary, kept up to date. It is the responsibility of the data controller to take every reasonable step to ensure that personal data that is inaccurate is either erased or rectified without delay.