South Korea ISMS-P
3.4 Protection when destroying personal information – South Korea ISMS-P

South Korea ISMS-P 3.4.1: Destruction of personal information

What does 3.4.1 require?

An internal policy sets retention periods and destruction; personal information is destroyed without delay when the purpose is achieved or the period expires, in a way that prevents recovery, and destruction is recorded (PIPA Article 21; Standards for Securing Personal Information Article 13).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.4 Protection when destroying personal information – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.