+CON.6.A1 Regulations for Deleting or Destroying Information [Central Administration, Process Owner, Data Protection Officer, IT Operation Department] (B)

CON.6.A1 Regulations for Deleting or Destroying Information [Central Administration, Process Owner, Data Protection Officer, IT Operation Department] (B)

An organisation MUST regulate the deletion and destruction of information. In doing so, the Process Owners for each specialised procedure or business process MUST specify which information must be deleted and disposed of under which conditions.

They MUST consider legal provisions that:

  • define the minimum retention periods
  • guarantee the maximum retention periods and the right to the secure deletion of personal data

If personal data is involved, the regulations for deleting and destroying personal data MUST be coordinated with the Data Protection Officer.

The deletion and destruction of information MUST be regulated for specialised procedures, business processes, and IT systems before they are used productively.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.24 Destruction of Devices or Storage Media