Disposing of hard drive data securely

Date: 22 May 2008

In recent months there have been a number of high profile incidents of sensitive data being lost and particularly by Government Departments but it is not purely a problem for Government. You and your company could also be potential victims of identity theft if all the sensitive and confidential information stored on hard drives is not completely erased or destroyed when the kit is disposed of.

Are you sure that secure data eradication really does take place when you dispose of redundant IT? Failure to comply with ever more complex directives and laws concerning IT and data disposal could not only lead to financially damaging litigation, but could also affect the credibility, reputation and trust of your company.

A BBC investigation discovered details of online bank accounts on recycled PCs sent from the UK to Africa. Bank account details belonging to thousands of Britons were being sold in West Africa for less than £20 each after the data was recovered from hard drives.  The companies involved no doubt thought they were performing a charitable gesture but by their neglect of their legal duties they left themselves open to expensive and damaging litigation.

In another case an obsolete PC was sold by a famous London merchant bank that contained 108 files relating to Sir Paul McCartney's private cash dealings". The PC was released into the second-user market without first being wiped clean of data relating to money movements in Sir Paul's account. Other client details contained on the PC related to a large charity for the blind and the Cancer Research Campaign.

More recently a man at a recycling centre in Exeter who had been looking for spare computer parts found a disc that contained personal information about Devon and Cornwall Police employees. This included names, addresses, telephone numbers, ranks and qualifications such as firearms or drug-testing skills.

The only sure way to protect your company is by ensuring that you only use a fully accredited organization that can prove, audit and certify that data has been totally eradicated, before any IT equipment is sold on.

Mitchell Charlesworth can introduce you to a company that has all the necessary accreditations and thus provide you with peace of mind of knowing that you have indeed adhered to all the legislative requirements. If you require advice or assistance in this increasingly complex area, please contact e: info@mitchellcharlesworth.co.uk or fill in an enquiry form.

Back