Data Destruction - GDPR

[CyBeRkId2002]

Hi all,

 

Does anyone know of a reasonably priced on-site data destruction company, or an off-site recycling company that you are happy cover all data protection / GDPR requirements and which you would be happy disposing of sensitive data in a secure way?

 

We have used a couple of companies ourselves in the past but where we have any computers to dispose of which hold sensitive data (very few) we securely wipe using DBAN before collection. I have now taken over the IT support services for a couple of local primaries and one of the first tasks for one of these is to dispose of the IT assets they have been holding on to for the last 10+ years. Unfortunately this includes a lot (and I mean a LOT) of staff laptops which contain who knows what personal data.

 

Looking for the cheapest way to get rid of all of these.

 

Cheers,

Michael

[Homer]

I'll come smash all the hard drives for a grand

[synaesthesia]

There is no requirement of certification so you don't have to spend silly money on having this done; it does have benefits however such as if you had a data leak, you would be able to cover your back with the relevant paperwork and procedure.

Still, if procedure is to dban drives once complete that is also more than sufficient, but keep a record. Likewise if you physically destroy a drive - drill for desktop drives, hammer for laptop. We don't keep such a record but thinking perhaps we should!

[CyBeRkId2002]

It is the data leak thing that concerns me, if I am taking responsibility for it.

 

DBAN'ing won't be practical on the number of hard-drives they have (+ some may not boot, have no power supply etc.) hence me looking for a better solution. Drill/hammer is another option but not 100% data destruction. Are schools confident this is enough of a measure to protect data. Would ideally like to pay a company a small amount to come out and shred HDD on-site if possible.

[synaesthesia]

A drive platter with a single hole or snapped in 2/3 can be recovered if someone wants to hard enough. However shattered with a hammer or as they usually do with a drill put through, there is ZERO chance of recovery. Less than someone recovering a document put through a high end crosscut shredder, and less chance than DoJ/MOD certified data destruction of the highest standard offered by companies/products like Blancco.

[FishCustard]

Drill/hammer is another option but not 100% data destruction. .

 

Drill a couple of holes with a >=10 mm bit and you'll obliterate the platters - chance of recovery is infinitesimal.

[RuthLelliott]

I don't know where you are, but we use a company called TechRecycle who are based in Surrey, that will take all our written off equipment away for free and who recycle the majority of stuff so it doesn't end up in landfill! Within a week or two we then receive a certificate of destruction listing everything and confirmation that data has been permanently destroyed (the certificate states that the destruction process exceeds CESG's HMG Infosec standard No 5 and US Army AR380-19 DoD 5220.22M).

[deano3693]

We use SPC Comm - They collect the hard drives and then issue a certificate on DBAN/Shredding etc.

[speckytecky]

LCWS would be my choice. They have recycled a heap of redundant kit for me over the years, incidentally including such things as old TV sets all for Free. In the past I have removed HDs stripped them down, removed the platters and destroyed those and included the non-platter bits in the collection.

 

I know the last contact I had with them they mentioned their process can now include bringing a bit of kit in their truck which will destroy platters on site if needed and they happily provide certification. Great people.