8.3.8 TODOΒΆ

Verify that sensitive personal information is subject to data retention classification, such that old or out of date data is deleted automatically, on a schedule, or as the situation requires.

Level 1  
Level 2 X
Level 3 X
CWE NIST
285