Classification level IV

• 1. The destruction of non-digital classified information must be arranged reliably. Destruction methods must prevent the reconstruction of the information, either wholly or in part. The same requirement applies to information in digital form.

Classification level III - in addition to item 1:

• 2. For international information of classification level III (Confidential), the registrar must sign a destruction certificate, which is stored in the registry/registration point. The registry data must be updated accordingly. The registry/registration point must retain destruction certificates for at least five years.

Classification level II - in addition to items 1-2:

• 3. If the information was created by another authority, the destruction of unnecessary information must be reported to the originating authority unless it is returned to them.
• 4. The destruction of information may only be carried out by a person appointed for this task by the authority. Draft versions may be destroyed by the person who created them.
• 5. The destruction of international information of classification level II (Secret) must be carried out in the presence of a witness. The witness must hold a personnel security clearance corresponding at least to the classification level of the information being destroyed.

Protection of information must be maintained until the end of its lifecycle.

The destruction of non-digital information is arranged reliably. Destruction methods (e. g. burning, shredding) must prevent the reconstruction of the information, either wholly or in part. This requirement also applies when using a third-party service for information destruction.