Which of the following is NOT a recommended data disposal practice?

• A. Securely dispose or destroy when no longer needed.
• B. Follow policy/regulation for retention and disposal.
• C. Document disposal actions and maintain evidence.
• D. Toss data in unsecured trash without erasure.

Answer: (D)

Data disposal should be secure and verifiable. When data is no longer needed, dispose of it in a way that prevents recovery of sensitive information, using secure deletion for digital data and physical destruction for paper records, or certified destruction services when appropriate. Following policy and regulations for retention and disposal ensures you handle data in line with legal, contractual, and organizational requirements. Documenting disposal actions and maintaining an audit trail helps demonstrate compliance and accountability to regulators and stakeholders. Tossing data in unsecured trash without erasure creates a clear risk: sensitive information can be recovered, leading to data breaches, privacy violations, and penalties, and it fails to meet policy and documentation standards.