314.4(c)(6)(i)—314.4(c)(6)(i)
>Control Description
Develop, implement, and maintain procedures for the secure disposal of customer information in any format no later than two years after the last date the information is used in connection with the provision of a product or service to the customer to which it relates, unless such information is necessary for business operations or for other legitimate business purposes, is otherwise required to be retained by law or regulation, or where targeted disposal is not reasonably feasible due to the manner in which the information is maintained; and
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.