This document contains guidelines for developing and establishing policies and procedures for deletion of PII in organizations by specifying:
a harmonized terminology for PII deletion,
an approach for defining deletion rules in an efficient way,
a description of required documentation, and
a broad definition of roles, responsibilities and processes.
This document is intended to be used by organizations where PII are being stored or processed.
This document does not address:
specific legal provision, as given by national law or specified in contracts,
specific deletion rules for particular clusters of PII as are to be defined by PII controllers for processing PII,
deletion mechanisms,
security of deletion mechanisms,
specific techniques for de-identification of data.
