CL III

• For international information of classification level III (CONFIDENTIAL), the registrar must sign a destruction certificate, which is stored in the registry/registration point; the registry data must be updated accordingly. The registry/registration point must retain destruction certificates for at least five years.

CL II

• For international information of classification level II (SECRET), destruction must be carried out in the presence of a witness. The witness must hold a personnel security clearance corresponding at least to the classification level of the information being destroyed.

Destruction by overwriting:

When destroying classified material by overwriting, it is recommended to follow the requirements for overwriting and reuse of storage media set out in the National Cyber Security Centre’s guidance Management of the lifecycle of hard drives.

Destruction by shredding:

When destroying classified material by shredding, the requirements for shred sizes for the relevant classification level, as set out in VM 2021:5 Recommendation on the handling of classified documents, must be followed.

The destruction of information may only be carried out by a person appointed to this task by the authority. Draft versions may be destroyed by the person who created them.

In the destruction of classification level I electronic information, the shred sizes compiled for classification level II in VM 2021:5 recommendation on the handling of classified documents may be applied, provided that the protection is supplemented with procedures approved by the authority. Such procedures typically include the supervised further processing of the shredded material by burning or melting.