Handling of Backup Data. (1) For Personal Data stored securely within backup systems that cannot be immediately deleted for technical reasons, the Processor shall: i. Flag the data as "restricted," ensuring it is not accessible for any active processing purposes; ii. Mark the data for destruction within the standard backup retention schedule; and iii. Permanently delete the data when the backup media is overwritten or securely disposed of in the ordinary course of backup maintenance. (2) Personal Data retained in backup systems under subsection (a) shall be considered deleted once it is flagged for destruction and segregated from active processing environments, provided the Processor ensures its eventual secure destruction.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement