5.4 Subscriber Account Suspension or Termination
All changes in this version
Title changed
Before · SP 800-63A
After · SP 800-63A-4
Subscriber Account Suspension or Termination
Control changed
Before · SP 800-63A
After · SP 800-63A-4
The CSP SHALL promptly suspend or terminate the subscriber account when one of the following occurs:
• The subscriber elects to terminate their subscriber account with the CSP.
• The CSP determines that the subscriber account has been compromised.
• The CSP determines that the subscriber has violated the policies or rules for participation in the CSP identity service.
• The CSP determines that the subscriber account is inactive in accordance with the policies or rules established by the CSP.
• The CSP receives notification of a subscriber’s death from an authoritative source.
• The CSP receives a legal instrument instructing it to terminate a subscriber’s account.
• The CSP ceases identity system and services operations. The CSP SHALL notify the subscriber if their account has been suspended or terminated. Such notices SHALL include information about why the account was suspended or terminated, reactivation or renewal options, and any options for redress if the subscriber thinks the account was suspended or terminated in error.
The CSP SHALL delete all personal information from the subscriber account records following account termination in accordance with the record retention and disposal requirements, as documented in its practices statement (see Sec. 3.1 ).