Principles and lawful processing – South Korea PIPA
South Korea PIPA 21: Destroy personal information without delay when no longer needed, or segregate what law requires to keep
What does 21 require?
Article 21 with Decree: when the retention period ends, the purpose is achieved or the pseudonymised-data period ends, the controller destroys the information without delay so it cannot be restored; where another law requires retention, it stores and manages that information separately from other personal information.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in Principles and lawful processing – South Korea PIPA