C1.2 - Confidential Information Disposed of Properly

C1.2 requires that an organization securely dispose of confidential information when it is no longer needed, using documented procedures that prevent unauthorized access or disclosure. It mandates tracking of disposal actions, verification that data is irretrievable, and periodic review to ensure compliance with the trust services criteria.