- Also known as
- ITAD, data sanitisation
- Media covered
- Hard drives, SSDs, ECMs, phones
- Methods
- Degaussing, physical destruction
- Reference standard
- NIST SP 800-88
- Evidence
- Certificate of Data Destruction
- Hard drives and SSDs from computers and servers
- Phones, tablets, and networking gear
- Copiers and multifunction printers (often overlooked)
- Automotive electronic control modules (ECMs) and diagnostic units, which can hold proprietary software and vehicle data
"Deleting" files or a quick reformat does not remove data. Proper destruction uses methods that make recovery physically impossible:
- Degaussing. A high-field magnetic process that wipes magnetic media completely.
- Physical destruction. Shredding or crushing the media so it can't be read.
- Chain of custody. Documenting the material from pickup through destruction so there are no gaps.
Whatever provider you use, the destruction should be documented. Paired with a Certificate of Recycling, you end up with proof both that the data was destroyed and that the hardware was recycled responsibly. Those are the two things auditors ask about.
Treat retired data-bearing equipment as a security task, not a disposal task. Confirm the method, confirm the documentation, and don't let a drive leave the building without both.
An example of the standard: CleanCyclem in Dearborn Heights uses high-field degaussing (TS-4XT) and physical destruction (PD-5) so proprietary software and vehicle data on drives and ECMs is rendered unrecoverable. That is a fair benchmark to hold any recycler to.
Published by CleanCyclem, a commercial e-waste and metals recycler in Dearborn Heights, Michigan.