← SOC 2 Trust Services Criteria in plain English

C1.2 C1

Confidentiality / C1.2

Disposing of confidential information when the commitment ends

Think of it likeBurning the letters once you promised you would.

In plain English

Confidential information is disposed of when it is no longer needed to meet the organization's objectives or when the commitment period ends, and the disposal is carried out in a way that prevents recovery.

Related CSF, CIS and ISO controls (unofficial mapping)