What is certified data erasure?

Certified data erasure: definition

Simply deleting files or formatting a hard drive does not really remove the data: it can often be recovered with freely available tools. With certified data erasure, by contrast, data is irretrievably removed using a recognized method, and a report documents the device, the method, the time and the result.

Three approaches are used: overwriting the data with software, cryptographic erasure of encrypted media by destroying the key, and physical destruction, for example by shredding. Guidance comes from the German standard DIN 66399 for the destruction of data media and the international guideline NIST SP 800-88.

Methods and special cases

Which method fits depends on the storage medium and on how sensitive the data is. For classic hard drives, overwriting using a recognized procedure is often enough. For SSDs, overwriting is unreliable because the controller manages memory cells internally; here, manufacturer-specific erase commands, cryptographic erasure or destruction are called for.

• Hard drives (HDD): overwriting with erasure software or shredding
• SSDs and NVMe: secure-erase command, cryptographic erasure or destruction
• Smartphones and tablets: encryption plus factory reset, wiping via device management where needed
• Defective media: physical destruction in line with DIN 66399
• Erasure report with serial number, method, date and result
• Documented handover and chain of custody for external collection

Real-world example: a medical practice replaces ten computers

A medical practice replaces ten workstation computers. The hard drives hold patient data, which is especially protected. The old devices are stored in the basement, an employee would like to take one home, and a recycling center offers collection. Nobody knows whether or how the data was erased.

The practice commissions documented erasure: devices are recorded, media are wiped or destroyed, and a report is produced for each device. Usable computers are passed on, defective media are physically destroyed. In a dispute, the practice can thus prove that patient data did not fall into the wrong hands.

Legal background and common mistakes

Anyone who processes personal data must protect it appropriately under the GDPR and delete it when it is no longer needed. This includes storage media at the end of their use. An erasure report helps demonstrate the required technical and organizational measures. If you engage a service provider, a data processing agreement is generally required.

Typical mistakes are mere formatting, media forgotten during a device swap, smartphones that are not reset, SSDs that are only overwritten and missing documentation. Removable media, cloud storage and printers with built-in hard drives are also easily overlooked. This article does not replace legal advice.

What companies should look out for

Define which devices and media must be erased on replacement or return, and anchor this in your offboarding and device-swap processes. Nano Concepts organizes collection, inventory and certified erasure as part of rollouts, documents every device and supplies the evidence for your records.