Save of reconstruction - Deletion of data
New PCs were bought, old PCs and laptops were replaced. Data protection requires a secure data deletion of old data.
With the new acquisition, or tender of new IT systems represents for many companies the question of what to do with the 'old' IT systems. Usually, thease are offered to its own employees to buy or properly disposed of by the relevant IT-provider as part of the original purchase. But what does "professionally deletion" mean within the Data Protection Act?
Every corporation or business will be reminded of their duty by law to ensure that old data stored on PCs or other data carriers, is getting deleted in a most secure way. By law, data can be deleted by making it unreconizable, by deletion or can be physically destroyed with the carrier included.
Overview of methods for data deletion::
1. Data erasure process, which permits the further use of the data carrier (deletion by overwriting individual partitions and files)
Sometimes it can happen that an economic deletion of data is contrary to what deletion professionals do propagate. Of course it is possible to delete data in a most secure way by using a data deletion software which overwrites the existing data x-times with a bit pattern. Overseen is the fact that no data deletion software is able to delete or overwrite those drive informations which are located at restricted areas in the firmware(s) of an hard disc drive. This leves some room for discussion, if a hard disc drive deletion is completed but fragments of old data can be restored from those firmware areas. On the other hand, the informations stored in the firmware area of an drive are usually small data fragments, which are copied from older and damaged sectors during the lifetime of the drive. A good data deletion service should cover also thease areas of an hard disc drive. This is one of the most important points separating a professional data deletion software from a downloadable freeware version.
2. Data erasure process prevent the further use of the data carrier. (Physical damage of the media / degaussing / data destruction)
2.1 Data Shredding
Based on an US-Policy of CMRR (Center of Magnetic Research) and a recommendation 800-88 of NIST (National Institute for Science and Technology), a reconsturction save destruction of an data carrier is only valid, if the physical particle size of an shredded hard disc drive is smaler than the physical size of an 512 kB data-block. This means that the physical target size has a shredding size of 0,2 - 0,1mm².