A guide to procuring GDPR compliant data destruction services.

This paper is designed to provide guidance for public sector organisations specifying Information Destruction (ID) services. It references previously published guidance documents from the Cabinet Office, the Centre for the Protection of National Infrastructure (CPNI) and the BSIA Information Destruction (ID) Sector.

The drafting of this guide has been undertaken on a clause-by-clause basis that highlights changes or additional clauses added to BS EN 15713:2009 from BS 8470:2006 version.

This best practice document will help businesses and individuals understand the basics of records management in order to prevent identity fraud and Corporate identity theft. It is an aide to all businesses trying to establish a simple, secure and workable records management system.

This code of ethics has been prepared in consultation with the BSIA to safeguard the interest of customers in the UK for information destruction services provided by members.