2323.0—2323.0
>Control Description
The Supplier shall, where not otherwise stated explicitly by country, legislation or Authority instructions, implement procedures to ensure that all Data is securely destroyed when no longer needed, or at the expiration or termination of the Agreement. Supplier shall:
i) Secure and confirm the erasure of Data from its systems and servers, including any physical or
electronic copies, prior to asset destruction and disposal
ii) Provide attestation of destruction, where specified by contract with Authority
iii) Require that any third parties engaged to process the Data shall securely dispose of such Data when no longer needed to provide the service, unless otherwise stated explicitly by country, legislation or Authority instructions.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.