The actual data owners are the individuals that the data belongs to. They have the right to request from any organisation without undue delay or question, changes to their data.
Organisations are the custodians, not the owners of data.
An individual has the right to protect themselves from identity theft.
Replace the term sex with gender. If sex is stored, be able to ensure that the correct security and procedures are in place to safeguard the confidentiality of that medical information. Ensure only those with the correct qualifications can access that data. Restrictions are in place to ensure that the data is not deliberately or unwittingly made public or given to other organisations (including being shared within government organisations) without the express consent of the individuals.
Unless an organisation has a legal right to request access to a birth certificate, they should avoid doing so.
Review the need for storing sex or gender. A number of organisations are now starting to realise that there is no business requirement for actually storing this data.
Title (salutation) is not a fixed set of values.
Gender and Title are fluid items and controlled by the individual. They are not subject to any legal control.
No validation checks should be made between gender, sex and title.
There should be a clear distinction between legal and preferred name.