South Korea ISMS-P
3.4 Protection when destroying personal information – South Korea ISMS-P

South Korea ISMS-P 3.4.2: Measures when retaining after the purpose is achieved

What does 3.4.2 require?

Where personal information is kept after its period or purpose because another law requires it, only the minimum items for the minimum legal period are kept, stored separately from other personal information, processed only for the legal purpose and accessed by as few people as possible (PIPA Article 21).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.4 Protection when destroying personal information – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll South Korea ISMS-P controls