We are living in a world overwhelmed by data. The amount of data generated daily is increasing at a rate far exceeding the rate of growth of the global economy. And this is not going to stop with the acceleration of digital transformation, the arrival of new technologies, but also the proliferation of devices on which data is stored (hard disks, removable media, smartphones, computers, servers, virtual machines, storage arrays, etc.)!

This naturally leads to an increase in data breaches, making data security one of the main concerns of companies. This is also reflected in the evolution of regulations on data protection and confidentiality (e.g. GDPR, CCPA).

It is a fact that this data, which has become an indispensable tool for companies in their decision making, must be protected. The pressure on companies to maintain an effective and reliable security policy to protect all corporate data (sensitive or confidential) is only increasing, forcing them to review their methods and implement data management processes.

As the subject of data security is more than vast, in this article we will focus solely on the management of data stored on end-of-life media, but also on the deletion of data throughout its life cycle.

 

When is it imperative to delete data?

There are various scenarios where you are required to delete some data from your various devices.

The GDPR gives anyone the opportunity to request the removal of their personal data from a company’s systems. In this case, the company in question is obliged to irremediably delete the data and must be able to prove that the deletion has taken place.

When a device (PC, mobile device, server, etc.) reaches the end of its life, or at the end of a rental contract, all data stored in it must be deleted, whether it is reused, resold or thrown away.

When an employee leaves, the storage materials must be completely cleaned, especially if the employee in question used personal computer equipment as part of his or her work.

But that’s not all! Data migration, end of use of certain data, etc. are also scenarios that require effective data deletion.

 

What are the different deletion methods currently used?

There are a number of data erasure methods on the market. However, the majority of them are inadequate in the case where irremediable deletion is desired:

– Overwriting with free or paid software tools: in most cases, no certification is provided, and there is no verification possible.

– Physical destruction by crushing or shredding: the lack of a complete chain of traceability for each device exposes companies to data breaches.

– Formatting: partial removal of access to data, and no verification and certification.

– Cryptographic erasure: quick solution but attention must be given to the ability to generate encryption keys correctly, and to implementation problems.

– Demagnetisation: not applicable for SSD disks.

However, still too many companies use these methods, as this 2019 study by Blancco and Coleman Parkes Research indicates, exposing these companies to potential breaches of sensitive data, leading to significant financial and reputational risks! Taking measures to delete end-of-life data is a step in the right direction, but it is not enough if there is no guarantee that the data will be completely deleted.

 

Our solution for irremediable data deletion

In order to guarantee data protection, it is essential to use the best deletion method. Whether it is at the end of a hardware’s life or during a step of its life cycle, the use of our erasure software tool allows for a certified and verifiable erasure.

The solution we offer, thanks to our partnership with Blancco, is secure, certified by more than 15 governing organisations around the world, multi-support, easy to install and use, and allows for the production of a forgery-proof report after each operation (to be produced in case of an audit, for example). All this with an unequalled level of compliance with requirements (RGPD, PCI, DSS, HIPAA, SOX, ISO27040, ISO27001, etc.)!

Want to know more about this solution? Contact our team at sales@rcube.lu or +352 31 71 32 555!