Defensible destruction is part of the data management process. It describes the method of securely destroying and disposing of obsolete documents and data in a controlled, legally defensible and compliant manner.
The importance of data security nowadays is well established. Following the introduction of the Data Protection Act, including new GDPR governance, organisations must adhere to strict laws regarding storage, retention, and disposal of data, or risk tough legal consequences. The principles surrounding data protection extend to data even when it is no longer required.
Having a robust, defensible destruction policy is crucial to proving compliance with GDPR regulations; businesses must be capable of proving how, where, why, and who destroys records.
The process covers all forms of data, including physical records such as financial, medical, legal, and personnel documents and digital data stored on servers, hard drives, flash, SSID, and more.
The Information Commissioners Office (ICO) regulates the process of defensible destruction to align with GDPR. The main requirements cover record keeping, employee training, secure erasure and physical destruction.
At IRM Consulting, we offer a professional, efficient data destruction service. We begin by analysing your company’s unique DNA, examining workflow, types of data and storage, and the retention rules that should be applied. Contact IRM now to discuss your defensible destruction requirements.