ASVS Requirement 14.2.7
- Level: 3
- Chapter: V14 Data Protection
- Section: V14.2 General Data Protection
- Source: 0x23-V14-Data-Protection.md
Description
Verify that sensitive information is subject to data retention classification, ensuring that outdated or unnecessary data is deleted automatically, on a defined schedule, or as the situation requires.