Cloud Controls Matrix

Back to discussions
Expand all | Collapse all

ISO/IEC 27555:2021 Information security, cybersecurity and privacy protection — Guidelines on personally identifiable information deletion

  • 1.  ISO/IEC 27555:2021 Information security, cybersecurity and privacy protection — Guidelines on personally identifiable information deletion

    Posted Oct 18, 2021 05:34:00 AM
    Hi All,

    ISO/IEC just published ISO/IEC 27555:2021 Information security, cybersecurity, and privacy protection — Guidelines on personally identifiable information deletion

    This document contains guidelines for developing and establishing policies and procedures for deletion of personally identifiable information (PII) in organizations by specifying:

    — a harmonized terminology for PII deletion;

    — an approach for defining deletion rules in an efficient way;

    — a description of required documentation;

    — a broad definition of roles, responsibilities and processes.

    This document is intended to be used by organizations where PII is stored or processed.

    This document does not address:

    — specific legal provision, as given by national law or specified in contracts;

    — specific deletion rules for particular clusters of PII that are defined by PII controllers for processing PII;

    — deletion mechanisms;

    — reliability, security and suitability of deletion mechanisms;

    — specific techniques for de-identification of data.


    You can preview the standard here: https://www.iso.org/obp/ui/#iso:std:iso-iec:27555:ed-1:v1:en

    You can purchase the standard here: https://www.iso.org/standard/71673.html

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------