PersonalDataDestructionAnonymizationAndEncryptionGuideline · Table (p.7)
From PersonalDataDestructionAnonymizationAndEncryptionGuideline.pdf · page 7
| 0 | 1 | 2 | 3 | 4 |
|---|---|---|---|---|
| B) Take appropriate measures to notify individuals to whom personal data has | ||||
| been disclosed by any means and request that they destroy it. | ||||
| C) Destroy all copies of the personal data stored in the Controller's systems, | ||||
| including backups, taking | into account any | relevant regulatory | ||
| requirements. | ||||
| 3- Examples of Destruction Techniques: | ||||
| A) Data Overwriting and Secure Erasure (SE): Data overwriting involves | ||||
| replacing original data with | random, meaningless data, | rendering | the | |
| original data irretrievable. Secure erasure is a more advanced data deletion | ||||
| technique than overwriting. It involves issuing a command to the device's | ||||
| software to delete all data, including data residing in sectors not typically | ||||
| accessible through standard deletion processes. | ||||
| B) Data Erasure | (without Physical Media Destruction): This | technique | ||
| involves utilizing a degaussing device to neutralize the magnetic field that | ||||
| stores data, thereby rendering the data effectively unreadable. Degaussing | ||||
| is a secure and efficient technique that preserves the physical integrity of | ||||
| the storage device for reuse, making it the preferred technique for bulk data | ||||
| erasure operations. However, degaussing is limited to magnetic media and | ||||
| is not applicable to solid-state drives (SSDs) or flash-based storage. | ||||
| C) Shredding and Distortion: Shredding assets into tiny shreds and physically | ||||
| distorting them to render the assets effectively unreadable. | ||||
| Second: Anonymization | ||||
| The Controller shall ensure that all direct and indirect personally identifiable | ||||
| information is irreversibly anonymized, rendering the data subject unidentifiable. | ||||
| Data that has been rendered anonymous shall no longer be considered personal | ||||
| Document | Classification: Public | 7 |
Source Metadata