Apologies firstly if this is a topic that has been raised already,(as I
believe it might have been- but can't seem to find it in the archive).
Although FOI guidance from the Information Commissioner (No.8) says that it
is sufficient to delete "twice," to be considered as 'no longer held,'by
the Authority for FOI purposes; am I right in thinking that this might be
insufficient for other RM obligations, (DP/Legal Disclosure & Discovery and
for compliance with BS 15489,) as information may still be retrievable
through back-ups.
I'd be grateful for any feedback or pointing in the right direction if this
has already been addressed, (particularly if their is any guidance on
adequate destruction under Data Protection).
Many thanks,
Caroline Ives
|