MAYAK NRICLUB Mobile Application User Account Deletion Policy
Purpose
This policy establishes the guidelines for the timely and secure deletion of user accounts to ensure data security, compliance, and efficient resource management.
Scope
This policy applies to all user accounts, including employees, contractors, and external users, that access the organization's systems, applications, and networks.
Policy Guidelines
1. Account Deletion Triggers
The following events may trigger account deletion:
- Termination of employment or contract.
- Expiration of temporary access.
- Inactivity for a defined period (e.g., 90 days).
- User request for account deletion (subject to verification).
2. Account Deletion Process
The account deletion process will follow these steps:
- Authorization: Account deletion must be approved by the NRI Club Russia Administrators.
- Backup: Relevant data associated with the account must be backed up and archived as per the organization's data retention policy.
- Notification: Notify the user (if applicable) and relevant stakeholders before deletion.
- Deletion: Remove the account from all systems, applications, and databases.
- Audit: Log the deletion activity, including the date, time, and responsible personnel.
3. Data Retention
Retain critical data for the duration specified in the organization's data retention policy. Ensure compliance with legal and regulatory requirements for data preservation.
4. Security Measures
The following security measures will be applied:
- Immediate Disabling: Disable the account immediately upon termination or inactivity to prevent unauthorized access.
- Credential Removal: Remove all associated access credentials, including passwords, tokens, and keys.
5. Exceptions
Exceptions to this policy must be documented and approved by the NRI Club Russia Security Team.
6. Enforcement
Non-compliance with this policy may result in disciplinary action, up to and including termination of employment or contract.
7. Review and Updates
This policy will be reviewed annually and updated as necessary to reflect changes in technology, regulations, or organizational needs.
