Data Deletion & Oversight

Definition

Remove or decommission securely with formal oversight and validation of data destruction, anonymisation, or off-ramping from systems, including verification of deletion from backups and derived models.

Examples

• Copyright Act 1968 (Cth) (no text/data mining exception)
• Attorney-General’s Department Text and Data Mining Consultation (2023–24)
• Creative Commons Licensing (CC-BY, CC0) – data.gov.au
• Publisher Data Licensing (e.g. News Corp datasets)
• Creative Commons vs Proprietary Licences in data.gov.au.

Indicators

• Number of systems with end-to-end deletion verification, including backups and replicas
• Existence of independent audit trails or third-party certificates confirming destruction
• Explicit off-ramp clauses in all cloud and vendor contracts covering derivative data
• Demonstrated ability to trace and remove training data influence from AI models (model un-training or weight re-initialisation)
• National-level oversight or accreditation mechanism for data disposal assurance (e.g. Australian Signals Directorate, National Archives of Australia, or Office of the Australian Information Commissioner endorsed certification)

Stocktake

• Data sanitization assurance. Microsoft Azure. 2023. Accessed October 2025. https://neliehelp.zendesk.com/hc/en-gb/articles/360011575797-Data-destruction-and-sanitization

• Digital Preservation 2020 Policy. National Archives of Australia. 30 June 2020. Accessed October 2025. https://www.naa.gov.au/about-us/who-we-are/accountability-and-reporting/archival-policy-and-planning/digital-preservation-policy

• Information security manual (ISM). Australian Signals Directorate. March 2025. Accessed October 2025. https://www.cyber.gov.au/business-government/asds-cyber-security-frameworks/ism?ss=true

• Self-assessment checklist: privacy obligations under the Data Retention Scheme. Office of the Australian Information Commissioner. 2017. Accessed October 2025. https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/more-guidance/self-assessment-checklist-privacy-obligations-under-the-data-retention-scheme

• Australian Privacy Principles, Chapter 11: APP 11 Security of personal information. Australian Government Office of the Australian Information Commissioner. Updated 3 October 2025. Accessed April 2026. https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-11-app-11-security-of-personal-information