Data destruction: securely destroying hard drives, SSDs and data carriers
Destroying paper is routine for many organisations by now, but digital data is often left behind. A phased-out laptop in the cupboard, a box of old hard drives, USB sticks from a previous administration. All those carriers hold data you thought was long gone. This guide explains what data destruction is, why wiping alone is not enough, which method suits which data carrier and how to prove it.
What is data destruction?
Data destruction is irreversibly making data on a carrier illegible. There are three main routes: overwriting (wiping), degaussing (a magnetic field) and physical destruction (shredding or crushing). Which route is safe depends on the type of carrier. The difference between wiping and truly destroying is explained in wiping versus destroying a hard drive.
Why deleting a file is not enough
Deleting a file and emptying the recycle bin feels final, but it is not. When deleting, the system only removes the reference to the data. The data itself stays on the carrier until it is physically overwritten. With standard recovery tools, deleted data can therefore often be retrieved. Only once the whole carrier is overwritten, degaussed or destroyed is the data truly gone.
Which carrier needs which approach?
Not every carrier can be destroyed the same way. The European standard DIN 66399 has separate series per media type.
| Data carrier | DIN series | Safe route |
|---|---|---|
| Hard drive (HDD) | H | Shredding or crushing, see HDD shredding |
| SSD and flash memory | E | Physical destruction, see destroying SSDs |
| USB sticks and memory cards | E | Physical destruction, see disposing of USB safely |
| Backup tapes (LTO, DAT) | T | Degaussing or shredding, see clearing tapes |
| Optical media (CD, DVD) | O | Shredding |
| Smartphones and tablets | E | Physical destruction, see destroying smartphones |
The three methods compared
Wiping (overwriting)
Software overwrites the data according to a certified method. Works reliably on older HDDs, but is unreliable on SSDs due to wear-levelling and spare cells. The carrier stays reusable.
Degaussing
A strong magnetic field rewrites magnetic carriers such as HDDs and tapes. Does not work on SSD or flash, which are not magnetic. Requires certified equipment and a measurement. Read the trade-off in degaussing, shredding or crushing.
Physical destruction
The carrier is shredded or crushed into particles. This is the most certain route and works on every type of carrier. The result is directly visible proof of destruction and the carrier is no longer reusable.
How does data destruction work in practice?
You do not have to process the carriers yourself. The procedure is a collection in four steps.
- Inventory. Make a list of the data carriers by type, with serial numbers where possible.
- Collection. The carriers are collected from you. For sensitive media in a sealed container.
- Destruction. Each carrier is destroyed to the correct DIN 66399 level for its type.
- Certificate. You receive a certificate of destruction with the quantities and serial numbers.
Do you also have a paper archive? It can come along in the same collection and is destroyed separately to its own level.
The certificate with serial numbers
For data carriers the certificate matters even more than for paper. For a lease return or an IT audit you often need to show, per unit, that a specific carrier was destroyed. That is why every hard drive or SSD is registered by serial number and listed on the certificate. Keep that certificate for at least 5 years in your GDPR file.
Have data carriers destroyed?
We collect your hard drives, SSDs, USB sticks and tapes and destroy them to the correct DIN level, with a certificate and serial-number registration. No call-out charge within 20 km of Amsterdam.
Request a quoteFrequently asked questions
What is data destruction?
Data destruction is irreversibly making data on a carrier illegible. That can be done by overwriting (wiping), degaussing or physical destruction. For certainty with sensitive data, physical destruction is the safest route.
Why is deleting a file not enough?
When deleting, only the reference is removed; the data stays on the carrier until it is overwritten. With standard tools, deleted data can often be recovered.
Can I wipe an SSD safely?
Due to wear-levelling and spare cells, software wiping on an SSD is unreliable. For certain destruction of an SSD, physical destruction (DIN 66399 E-level) is needed.
Do I get a certificate with serial numbers?
Yes. For data carriers, each unit is registered by serial number and listed on the certificate of destruction. That is often required for lease return or an IT audit.
Can paper and digital media go together in one go?
Yes. Paper archive and data carriers can be handed over in the same collection and are each destroyed to their own level.
Conclusion
Data destruction is more than deleting a file. For certainty, the type of carrier counts. HDDs can be shredded or degaussed, SSDs and USB sticks require physical destruction and tapes have their own route. The safest and most provable choice is physical destruction to the correct DIN level, with a certificate and serial numbers as proof.
Want to have data carriers destroyed? Request a quote via desnipperaar.nl. You tell us which carriers you have and you get a fixed price with a certificate and serial-number registration.