Standard

Data Decommissioning

Data decommissioning is the process of retiring and removing data systems, applications, or services that are no longer needed. This involves ensuring that any data stored in these systems is either transferred to a new system, archived for future reference, or securely deleted if it’s no longer required.

Part of: Standards collection

Purpose

The goal of data decommissioning is to reduce costs and risks associated with maintaining outdated or unnecessary data systems, while also ensuring that important data is not lost and that all data is handled in compliance with data protection regulations.

Categories

Information and Data Management

  • Data Governance
  • Data Lifecycle
  • Data Protection

Security

  • Information Security

How to meet this standard

To be compliant, you need to ensure data has been fully decommissioned at the end of its lifecycle.

What the Information Asset and System Owners must do

  1. Clearly define the scope and objectives of the decommissioning activity, including which systems, components or services that will be decommissioned or be impacted by it.
  2. <li>Understand all users and clearly communicate the criteria and reasons for decommissioning, including any associated timescales.</li>  
    
    <li>Document clearly the proposed decommissioning plan, including where any data or information will be backed up, if required.</li>  
    
    <li>Finalise the decommissioning plan, dependent on the scale and scope create a project / resourcing plan.</li>  
    
    <li>Obtain relevant board or SRO approval.</li>  
    
    <li>Test and validate the data, system or service has been successfully decommissioned. Ensure to validate any linked data or system functionality has not been compromised.</li>  
    
    <li>Ensure all relevant contracts, certificates and licenses are ceased.</li>  
    
    <li>Remove the decommissioned service out of DfE's Service, IT, assurance and MS365 lists, including any associated / shared links.</li>  
    
    <li>Maintain an audit trail of all decommissioning activity and carry out a post decommissioning review.</li> 
    
Version history
Version Date Details
Current version