What is ISO/IEC 27555 about?
ISO/IEC 27555 contains guidelines for developing and establishing policies and procedures for deletion of personally identifiable information (PII) in organizations by specifying:
- A harmonized terminology for PII deletion
- An approach for defining deletion rules in an efficient way
- A description of required documentation
- A broad definition of roles, responsibilities and processes
ISO/IEC 27555 helps in developing the policies and procedures for deletion of PII that include a set of rules and responsibilities for the process involved.
Note: ISO/IEC 27555 does not cover:
- Specific legal provision, as given by national law or specified in contracts
- Specific deletion rules for particular clusters of PII that are defined by PII controllers for processing PII
- Deletion mechanisms
- Reliability, security and suitability of deletion mechanisms
- Specific techniques for de-identification of data
Who is ISO/IEC 27555 for?
ISO/IEC 27555 on Information security, cybersecurity and privacy protection is useful for:
- Organization where Personally identifiable information is stored or process
- Cyber security
- IT industry
- Cyber security professionals
- Any entity responsible for providing security solutions to organisations
Why should you use ISO/IEC 27555?
The organizations use this personally identifiable information (PII), which is subject to various compliance provisions relating to privacy. Thus, organizations need to ensure that PII is not retained for longer than is necessary and that it is deleted at the appropriate time.
ISO/IEC 27555 will help you in designing and understanding the deletion rules and also helps in embodying the appropriate retention periods which helps in satisfying the demands of stakeholders.
ISO/IEC 27555 helps in specifying the standard and regular deletion period and also helps in backing up the data whose deletion period is about to reach. These policies and procedures can be improved with the help of ISO/IEC 27555 which ultimately gives rise to development.
Overall, ISO/IEC 27555 will help in developing and establishing policies and procedures for Personally identifiable information (PII) deletion that can be easily implemented in your organization.