How To Sanitize Computer Equipment
Learn about removing sensitive data from computer equipment and electronic media.
About sanitizing
The process of removing data from computers and media is called sanitizing.
Computers and media that have held sensitive data must be properly sanitized before being repurposed, surplused, or recycled. Data may be considered sensitive for a number of reasons, including classification as:
- Trade secret/ proprietary information
- Student information (under FERPA)
- Patient information (under HIPPA)
- User id/ password combinations
- Financial information
- "Personal information" (as defined by SB 1386)
See below for a new standard from UCOP and additional guidance from the Department of Education's Office of Civil Rights regarding this process.
Sanitizing media
Magnetic media (hard drives, tapes, CD-ROMs) which retain no value or no longer function should be physically destroyed (by crushing, drilling, shredding, or incinerating).
Drives that will be repurposed or surplused should be sanitized using an appropriate program. Degaussing is acceptable for magnetic tape or floppy disks which need to be reused. Write-once media should be physically destroyed.
Some programs suitable for sanitizing disk drives are
- Intel-based systems: CMRR's Secure Erase, Darik's Boot Nuke, Disk Wipe
- Apple-based products: Applications > Utilities > Disk Utility
- Unix systems: wipe
UCSD Surplus Sales require that media or machines they collect display a "certified clean" label, containing information about who cleaned the machine, on what date, and the method/ program used. A template for stickers is available (PDF, prints on Avery 5160 labels).
Learn more
- Institutional Information Disposal Standard - UCOP
- Guidance on Disposing of Electronic Devices and Media - Department of Education's Office of Civil Rights
- How to Wipe A Hard Drive - Lifewire
- How to Securely Erase Your Hard Drive - PC World