14/06/2025
Let us assess your Data Security Risks by giving you our checklist
All you have to do is schedule a monthly, quarterly, or yearly pickup.
You will receive your Safe Purge Solutions Certificate, ensuring compliance.
POPIA-Aligned Data Destruction Checklist
Safe Purge Solutions - Sole Proprietor Director: Oliver Brettschneider
Email: [email protected] Cell: 072 226 9694
1. Retention Schedule Compliance
[ ] We have a documented retention policy for patient records (electronic & paper) [ ] We routinely identify records past their legal retention period
[ ] We know the required retention times for medical records (e.g., 6 years, minors: until 21+)
2. Secure Paper Destruction
[ ] We use locked bins or consoles for disposing sensitive documents [ ] We use a certified shredding provider (on-site or off-site)
[ ] We receive certificates of destruction for all shredded materials [ ] Paper is cross-cut shredded or pulped (not strip-cut or dumped) [ ] Destruction is documented in an audit trail or compliance log
3. Digital Data Destruction
[ ] We securely wipe or degauss old hard drives, laptops, USBs, phones, etc. [ ] We don't just 'delete files' - we render data completely irrecoverable
[ ] We receive verifiable destruction certificates (with serial numbers if needed)
[ ] IT staff or contractors use data erasure tools compliant with ISO 27001 or NIST 800-88 [ ] Drives/media awaiting destruction are stored securely
4. Documentation & Legal Protection
[ ] We maintain a register/log of all destroyed records (date, type, method, reference #) [ ] We have agreements in place with destruction service providers (SLAs or NDAs)
[ ] We are ready to produce evidence of secure destruction if audited by the Information Regulator
5. POPIA & Staff Awareness
[ ] Staff are trained on handling, storing, and disposing of patient data [ ] Data destruction is included in our POPIA compliance policy
[ ] Roles and responsibilities for data disposal are clearly assigned [ ] Incidents of improper disposal are logged and investigated
