Data Destruction Compliance

Data Destruction Compliance

Do you have questions regarding proper data destruction and your organization’s compliance issues?

Which of these areas do you need to make sure your company is compliant?

  • Health Insurance Portability and Accountability Act (HIPAA)
  • Sarbanes-Oxley Act (SOX)
  • Gramm-Leach-Bliley Act (Financial Services Modernization Act)
  • USA Patriot Act (Bank Security Act)
  • Homeland Security Information Sharing Act (Federal agencies security information)
  • D.o.D. (Department of Defense) standards
  • National Security Agency (NSA)
  • National Institute of Standards and Technology (NIST) Special Publication Series800-88
  • National Industrial Security Program (NISP) Operating Manual (DOD 5220.22-M)
  • Health Information Technology for Economic and Clinical Health (HITECH)
  • Fair and Accurate Credit Transactions Act (FACTA)
  • Identity Theft and Assumption Deterrence Act
  • FDA Security Regulations (21 C.F.R. part 11)
  • Payment Card Information Security Standard (PCI)

Does your storage device have to be destroyed to ensure your data is safe?

It depends on the sensitivity of your data.

Level I (reuse allowed)

  • Appropriate for individual or business. Data Destruction Certificate provided at no charge
  • Degauss allowable media types before testing and certification
  • Reformat and single pass format of functional servo storage media and hard drives. Non-functional media will be degaussed (de-magnetized) and recycled
  • This is a green, eco-friendly solution

Can your storage media be degaussed for reuse and resale?

Can be degaussed:

  • 3480, 3490e, 4mm, 8mm, DLT, SDLT, video, and round reel tape can be degaussed
  • Media with value is then tested and certified for re-package

Cannot be degaussed:

  • Hard Drives, optical disks, 3592, T10K, T-10000, LTO, 3590, 9840, and 9940 cannot be degaussed
  • Degaussing these media types destroys the servo track and renders the unit unusable.
  • Certification requires data destruction using specialized equipment and/or over writes.

Level II  (reuse allowed)

  • Appropriate for business and individuals desiring a higher level of security. Data Destruction Certificate provided at no charge
  • Compliant for mid-range data sensitivity. Covers many regulatory compliance issues and un-classified data.
  • Degauss allowable media types before testing and certification
  • Reformat and multiple-pass format of functional servo storage media and hard drives. Non-functional media will be degaussed (de-magnetized) and recycled
  • Low level DoD compliant – 7 pass wipe
  • This is a green, eco-friendly solution

Level III – Full Data Eradication and Media Destruction and Disposal (not for reuse)

  • Appropriate for  organizations interested in the ultimate data destruction solution
  • Compliant with all standards and regulations
  • Full degaussing and physical destruction of storage media and hard drives
  • This solution is not as eco-friendly as other solutions – some parts may be recycled – but some may end up in landfills

We can answer all of your questions – Contact us anytime

  • Can my data be securely erased without destroying the media itself?
  • How much is my used storage media or hard drives worth?
  • Are these processes documented so I can show others at my organization?
  • Is someone available to help me put together a proposal for approval?
  • Is WeBuyUsedITequipment a broker? Or do they do all of the work themselves at their secure, company-owned facility?
  • How do I stay on top of any changes in the laws and regulations concerning the safety and destruction of our data?
  • Which types of equipment are being used during the data destruction processes?
  • What type of documentation will we receive before, during, and after this process?
  • Does WeBuyUsedITequipment have a secure and alarmed facility? Is the facility under video surveillance?
  • Do you support data destruction for all types of media formats? (mainframe or open systems; enterprise, midrange, or desktop; with or without servo track, SCSI, SATA, FC, etc.) ?
  • Do your processes meet any applicable standard, including the U.S. Department of Defense Sanitizing Standard?
  • How long has WeBuyUsedITequipment been in the asset recovery and data destruction business?
  • Can you supply references for other organizations in my industry?
  • Do you provide on-site solutions?
  • What are the ramifications if our organization does not properly conform to the regulatory acts and laws concerning data destruction?

We provide certified data destruction

We provide a data destruction certificate for every order.