Data sanitization on hard drives and SSDs: how to do it in a certified way

What is data sanitization?

Data sanitization is an essential process to guarantee the security of information stored on devices such as hard drives (HDDs) and solid state drives (SSDs). This procedure permanently removes all data, preventing recovery and misuse.

Why is certified sanitization important?

Ensuring that data has been completely removed requires methods that follow recognized protocols. Certified sanitization provides formal proof that the information has been completely eliminated, which is essential for complying with data protection regulations and avoiding the risk of leaks.

Differences between HDDs and SSDs in sanitization

HDDs traditionally use magnetic techniques for recording, while SSDs work using flash memory. These differences have a direct impact on sanitization methods:

• HDs: can be formatted by magnetic overwrite, encryption or physical destruction;
• SSDs: require specific procedures due to the memory architecture and block wear, such as ATA Secure Erase commands and secure physical destruction.

Certified methods for sanitizing hard drives

Some well-established methods guarantee effective sanitization of hard drives:

• Multiple overwrites: filling the disk with random data several times to erase the original information;
• Degaussing: use of magnetic fields to destroy the data on the disk;
• Physical destruction: fragmentation or shredding of the disk to make it impossible to recover the data.

These methods must be carried out by certified professionals to guarantee their effectiveness and to issue the corresponding certificates.

Certified methods for sanitizing SSDs

For SSDs, the most suitable methods are:

• ATA Secure Erase: internal command that erases all data from the SSD completely;
• Total encryption followed by key destruction: makes the data inaccessible;
• Physical destruction: shredding or pulverizing the device to prevent recovery.

The validity of the process also depends on the issuance of a certificate proving the effectiveness of the procedure.

Step by step to carry out certified sanitization

1. Identify the type of device (HDD or SSD) to choose the appropriate method.
2. Opt for methods accepted by international standards, such as NIST 800-88 or national standards.
3. Use certified tools and equipment to carry out the sanitization.
4. Request the issuance of a certificate proving the erasure of data.
5. Store and manage documentation for audits and legal compliance.

Important standards and regulations

Various standards regulate data sanitization, including:

• NIST 800-88: a guide from the US National Institute of Standards and Technology on secure data disposal;
• LGPD: Brazil's General Data Protection Law, which requires strict care in the handling and disposal of personal information;
• ISO/IEC 27040: international standard for information security and the protection of stored data.

Conclusion

Certified data sanitization of hard drives and SSDs is essential to protect sensitive information, avoid legal risks and ensure compliance with security standards. Adopting appropriate methods for each type of device and ensuring that certificates are issued are essential steps for the safe and responsible management of stored data.