Data Destruction is important
The responsibilities of organisations relating to confidential data have become more stringent since the implementation of the Data Protection Act 1998.
Putting information in bins and hoping that it will be appropriately destroyed at a later date is not enough.
When using a sub-contractor you must ensure you:
- Choose one who gives guarantees about security measures.
- Takes reasonable steps to ensure compliance with those measures.
- The organisation is legally responsible for the data right up until the point of destruction, so it is important to get a certificate of destruction as proof that the process has been completed.
- By overwriting the hard drives to the 3 wipe US Department of Defence Standard (DoD 5220.22-M) or 7 wipe German standard.
- By recycling via destruction, the hard drives and other data carrying materials have the circuit boards removed prior to fragmentisation and are smelted to recover the Aluminium content.
- By degaussing to the approved SEAP standard that renders magnetic media unusable, we can also provide this as an on-site service if required. The Security Equipment Assessment Panel (SEAP) is an organisation of the Cabinet Office responsible for appraising the eligibility of security products to protect Government assets.