(1) Destruction is the process of rendering personal data inaccessible, irretrievable or non-reusable by anyone, by no means.

(2) The data controller is obliged to take any type of technical and organizational measures required for ensuring destruction of personal data.