9.3 Destruction and Deletion
Personal data that is no longer required for any lawful purpose must be securely deleted or destroyed and this should be noted in a Data Release Log and the Controlled Data Register. Particular care should be taken to delete Personal Data from any computer equipment that is disposed of, including its transfer of ownership or custody in any way (including scrappage).