Add a proof of deletion step to the customer offboarding checklist
TSK-0281
-
Last updated
Open
Owner
Charlotte VeldhuisAssignee
Rik MeindersCreated by
Sam de VriesDue
3/15/2027Source
Risk treatment actionAbout this Risk
RSK-023 — Customer data is not removed when a contract endsWhen a customer leaves, copies of its data remain in backups, tickets, and documentation. Data that is kept without a reason breaches the agreement and the GDPR, and it makes any later breach worse.
Measures
The offboarding checklist lists every place where customer data lives and who removes it, and the account manager asks the customer to confirm. The proof of deletion is stored with the record of the customer.
Risk treatment action
On trackNext action is 3/15/2027 — no urgency right now.