3.4 Protection when destroying personal information – South Korea ISMS-P
South Korea ISMS-P 3.4.1: Destruction of personal information
What does 3.4.1 require?
An internal policy sets retention periods and destruction; personal information is destroyed without delay when the purpose is achieved or the period expires, in a way that prevents recovery, and destruction is recorded (PIPA Article 21; Standards for Securing Personal Information Article 13).
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in 3.4 Protection when destroying personal information – South Korea ISMS-P