# DAT-05 Right-to-deletion procedures

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-05

Right-to-deletion procedures apply to agent memory, vector embeddings, and any derived data, with evidence of execution on request.

Subject deletion requests (right to erasure) can be fulfilled across all agent-related data stores, including agent memory, vector embeddings, conversation logs, and derived data, within statutory windows. Evidence of execution is retained. The procedure covers not just structured databases but also the increasingly complex data stores used by modern agent architectures.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-05: Deletion procedures are documented and cover all agent data stores; at least one deletion request has been processed end-to-end or the procedure has been tested; evidence of execution is retained.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Deletion procedures are documented and cover all agent data stores.
- At least one deletion request has been processed end-to-end or the procedure has been tested.
- Evidence of execution is retained.

## Framework mappings

- NIST AI RMF: MAP 2.3
- ISO/IEC 42001: A.7.4
- SOC 2 (TSC): CC6.6, C1.1
- EU AI Act: Art. 10(2)
- Singapore: PDPA s.25, PDPA s.26, AI Verify Data Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-05 Right-to-deletion procedures. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-05