The entity securely disposes of personal information to meet the entity’s objectives related to privacy
Requests for deletion of personal information are captured, and information related to the requests is identified and flagged for destruction to meet the entity’s objectives related to privacy
Personal information no longer retained is anonymized, disposed of, or destroyed in a manner that prevents loss, theft, misuse, or unauthorized access
Policies and procedures are implemented to erase or otherwise destroy personal information that has been identified for destruction.