Mauritius DPA
Part IV: Obligations on controllers and processors – Mauritius DPA

Mauritius DPA 27: Section 27: destroy personal data when the purpose lapses

What does 27 require?

Where the purpose for keeping personal data has lapsed, the controller must destroy the data as soon as reasonably practicable and notify any processor holding them; a processor so notified must destroy the specified data as soon as reasonably practicable.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part IV: Obligations on controllers and processors – Mauritius DPA

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.