For the period from 1 March 2023 to 1 March 2029 the requirements for confirming the destruction of personal data were established. The destruction statement is the supporting document. If the operator uses automated means to process personal data, then additional requirements (both content and form) are placed on the deletion report. In such a case, it is also required to be uploaded from the personal data information system's event log.
The act of destruction of personal data in electronic form must be signed with an electronic digital signature and contain the following information:
- name (of a legal entity) or surname, first name, patronymic (if any) (of an individual) and address of the operator;
- Name (of the legal entity) or surname, first name, patronymic (if any) (of the individual), address of the person (s) processing the personal data of the personal data subject (s) on behalf of the operator (if the processing has been assigned to such person (s));
- the surname, first name, patronymic (if any) of the subject(s) or other information relating to the particular individual(s) whose personal data was destroyed
- name, surname, patronymic (if any), position of person(s), who destroyed personal data on the subject of personal data, as well as their (their) signature;
- list of categories of destroyed personal data on the subject(s) of personal data;
- Name of destroyed tangible (material) carrier(s), containing personal data on subject(s) of personal data, with indication of number of sheets in respect of each tangible carrier (in case of processing of personal data without use of automation means);
- Name of information system(s) of personal data, from which personal data on the subject(s) of personal data were destroyed (in case of processing of personal data with the use of automation means);
- method of destruction of personal data;
- the cause of destruction of personal data;
- Date of destruction of personal data on the subject (subjects) of personal data.
The Nadmitov, Ivanov & Partners law firm advises on personal data, data protection and electronic services.
Email: info@nplaw.ru
Tel: +7 (495) 649-87-12
Tel: +7 (495) 649-87-12