Notes

he end.
Thank you everyone for coming to learn about privacy awareness during your lunch.
Today I will be talking about how to properly dispose of and/or destroy Personal Information
and Sensitive Personal Information.
It is important for you to note that confidential information disposed or destroyed improperly
can constitute a risk to Sitel, its clients and their customers.
The information owners of paper and electronic information are responsible to decide if and
when the information needs to be destroyed.
Client data destruction should be governed by the client agreement(s).
If the data is to be returned to the client, it needs to be transferred back to the client
in a secure manner.
Once the data transfer is completed, confirm with the client that the data has arrived
safely, can be accessed, and is complete prior to destroying it on our systems.
Sitel specific data destruction must comply with our Global Data policy and Data Retention
schedule.
Rules vary by country; some local laws may apply also. Please consult with the Privacy
Team as needed.
Data must be disposed of in a secure manner so that the data is irretrievable, unreadable,
and unusable.
Only approved third party data destruction vendors should be used
Data destruction certificates should be retained in the site
Return of Personal Information/Sensitive Personal Information applies to Sitel, but
also to its vendors.
This has to be covered by contract.
Always take permission from the information owners before to deleting client or Sitel
information.
Always use a method of disposal appropriate to the classification level of the information.
Always destroy information approved for destruction immediately and efficiently.
Never take electronic or paper copies of information off-site or distribute outside
your team, even to a client, unless you are authorized to do so.