(1) Erasure of personal data is the process of rendering personal data inaccessible and non-reusable for the users concerned, by no means.

(2) The data controller is obliged to take necessary technical and organizational measures required for ensuring erased data to be inaccessible and non-reusable for its users concerned.