Legal Compliance for Hard Drive Erasing
The hard drive erasing procedures we employ prevent recovery even if using sophisticated laboratory techniques. If you are in our service area we can even visit you on–site so you never lose custody or control of your data.
ALL of our hard drive erasing procedures follow the recognized guidelines of the
National Institute of Standards and Technology (NIST) Special Publication 800-88 "Guidelines for Media Sanitation."
NIST 800-88 guidelines meet or exceed requirements of current legislation, specifically:
- Health Information Portability and Accountability Act (HIPAA)
- Personal Information Protection and Electronic Documents Act (PIPEDA)
- Gramm-Leach-Bliley Act (GLBA)
- Sarbanes-Oxley Act (SBA or SOX)
- SEC Rule 17a
- Federal Information Security Management Act (FISMA)
- Fair and Accurate Credit Transactions Act of 2003 (FACT Act or FACTA)
UPDATE: The NISP Operating Manual, also called NISPOM, or DoD 5220.22-M no longer specifies any particular method of eData sanitation, but leaves it up to the "Cognizant Security Authority (CSA)" and that is why industry now relies on the National Institute of Standards and Technology (NIST)
publication 800-88 for guidance.
NOTE: Software wiping utilities (overwriting) may be approved by NIST
800-88 for lower security sanitation, but they may not meet the legal requirements of HIPAA, PIPEDA, GLBA, or Sarbanes-Oxley. This is why we use specialized hardware erasing tools to remove data from hard disk drives (HDD.)
It is cheaper and safer to do it right the first time -- call Carolina Data Destroyers!
|