Hardware

Destroying access passes, badges and debit cards

13 May 2026 · 7 min read · DeSnipperaar

An expired access badge in the desk drawer. A stack of old OV-chipkaarten in the archive box. A box of decommissioned debit cards from a merged bank. Plastic identity carriers pile up in every organisation, and they all contain data that does not belong in the paper bin. This article explains what they hold, how to destroy them safely and which DIN level you need.

What is inside a plastic card?

A modern card has two or three data components:

• Magnetic stripe: low-tech, readable with cheap readers (under 50 euros). Usually contains name and card number.
• Contact chip (gold pad): higher capacity, often with cryptographic keys that enable transaction confirmation.
• Contactless chip plus antenna: RFID/NFC, readable at distances of a few centimetres to several metres depending on type. Works without visible contact.
• Printed surface: name, photo, organisation, sometimes BSN or employee ID.

For access passes the internals are often a Mifare or HID chip with a unique ID linked to a server. For debit cards there is a chip with EMV cryptography, plus a magnetic stripe as fallback.

Why cutting in half is not enough

The natural reflex with old cards is to put scissors through the chip. For expired private cards at home that is fine. For business destruction it is not, for three reasons:

1. The magnetic stripe stays largely intact in half a card and is readable.
2. The contactless antenna can still function in half a card if the antenna loop is not broken.
3. The printed surface stays readable; on ID badges with BSN or passport photo that is a GDPR issue.
4. No audit evidence. Scissors do not produce a certificate.

DIN 66399 E classification

The DIN 66399 standard sets an E scale for electronic media. For plastic cards with a chip that is the right classification:

• E-3: particles up to 160 mm². Suitable for passes without special personal data.
• E-4: up to 30 mm². Suitable for access badges, loyalty cards, debit cards.
• E-5: up to 10 mm². For identity cards with BSN or medical cards.
• E-6 / E-7: 1 and 0.5 mm². Defence and intelligence level, rarely needed in practice.

Our mobile card shredder works at E-4 by default. For clients with patient cards or identity passes with BSN we go to E-5.

For most business cards E-4 is enough. BSN or medical cards require E-5.

Different card types in practice

• Access badges with photo and name: personal data, so "appropriate technical measures" required. E-4 minimum.
• Debit cards and PIN cards: the EMV chip can be replicated with enough effort, so E-4 minimum, banks often require E-5.
• OV-chipkaarten: contain balance and travel history. E-3 suffices for expired cards without a linked name.
• Loyalty and discount cards: usually little data; E-3 suffices.
• RFID tags and keychains: same scale, small format, can go in the same stream as passes.
• Identity documents with BSN: E-5 minimum. We advise against delivering ID passes "loose"; put them in a sealed bag.

How does it fit into a collection run?

Passes do not need to be separate from paper or other hardware. We combine in one run:

1. Confidential paper in our usual containers.
2. Plastic cards and badges in a sealed bag or small box, clearly marked.
3. Optional addition: USB sticks, memory cards or optical discs (read about disposing of USB sticks and optical discs).

The right shredder is used per type. The certificate then lists a separate line per type with DIN classification and number of items or weight.

Debit cards: additional requirements

Banks often have their own destruction protocol for batches of decommissioned cards (after a merger, rebrand or end of leasing). They commonly require:

• Destruction on site (mobile) without transport of the cards.
• DIN E-5.
• Photo documentation of the batch for processing.
• Certificate with batch count or weight plus date.

We meet these requirements on request. For banks we work as standard with photo reporting as bonus evidence.

What to do with the contents of the wallet?

On death, bankruptcy or merger you sometimes inherit a large stack of cards of unclear status. Approach:

1. Sort by type (access, bank, loyalty, ID).
2. Put everything in a sealed box.
3. Request a quote with item counts per type.
4. We come by and shred on site. One certificate covers it all.

---

Unsure which DIN E level you need? Email us via desnipperaar.nl with a description of the passes; we will advise proportionately.