OWASPASVS 5.0 requirement
ASVS-V14.2.7 Sensitive information is subject to data retention classification, ensuring that outdated or unnecessary data is deleted automatically, on…
- Standard
- OWASP ASVS 5.0
- Chapter
- V14 Data Protection
- Section
- V14.2 General Data Protection
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that sensitive information is subject to data retention classification, ensuring that outdated or unnecessary data is deleted automatically, on a defined schedule, or as the situation requires.