ISO/IEC 27018:2025
Annex A – Public cloud PII processor extended control set – ISO/IEC 27018:2025

ISO/IEC 27018:2025 A.11.13: Access to data on pre-used data storage space

What does A.11.13 require?

Whenever storage space is allocated to a customer, the processor makes sure no data previously held there is visible to that customer. 2019 guidance, not confirmed for this edition: where explicit erasure is impractical, specific technical measures prevent another user reading old data, for example returning zeroes for space not yet written.

Maintained by Gerard Blokdyk

Other controls in Annex A – Public cloud PII processor extended control set – ISO/IEC 27018:2025

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.