Processing agents or any other person that intervenes in one of...

Processing agents or any other person that intervenes in one of the processing phases undertake to ensure the security of the information as provided in this Law regarding personal data, even following conclusion thereof.

ISO 27701

7.4.5: PII de-identification and deletion at the end of processing

7.4.7: Retention

7.4.6: Temporary files

8.4.1: Temporary files

8.4.2: Return, transfer or disposal of PII

6.15.1: Compliance with legal and contractual requirements

6.9: Operations security

6.5: Asset management

6.6: Access control

6.7: Cryptography