Failed Devices and Media

Guide for disposing of failed devices, media containing data

Guidance from the University Information Security Office: January 2016

If device in question is a Solid State Drive, please read this first: How to securely erase a Solid State Drive

Devices that have been appropriately verified as wiped do not need to be destroyed. However, if a device or media that potentially contains university data cannot be wiped, the only appropriate recourse is to destroy the media before disposal. No single solution will be without some risk or cost. Situations and opportunities will vary for each campus/department.

The UISO outlines here potential solutions and risks when contemplating the best procedure(s) for destroying devices or media. The overall objective is to minimize the risk of personal injury and data exposure.