Make use of the IU Surplus Store's drive shredding service.
Use the IUPUI Surplus Store pickup service or deliver the drive to the store for secure storage pending transportation to the Surplus Store at IU Bloomington for shredding.
If on a regional campus, departments may transport drives/devices to IU Bloomington to be shredded. Considerations include:
- Risk to an individual while traveling
- Risk to IU should devices be lost or stolen while being transported, resulting in a data exposure.
- Frequency of travel. Unwiped nonfunctional devices should sit no longer than 90 days.
- Selection of an appropriate person to transport the devices: IU full-time, non-student employees may transport failed devices for disposal.
- The employee who will transport the devices should understand the potential sensitivity of the data that may reside on the devices and the risk to IU in the event of a data exposure.
- The employee should take appropriate precautions to protect the devices, such as keeping the vehicle locked when unattended and stowing the devices out of sight.
- The employee should take as direct of a route as possible to the location of the drive shredder while avoiding unnecessary stops, overnight stays or side trips.
- Include a printed list of devices and their serial numbers with the shipment and keep a copy for your reference. Request acknowledgement of receipt and destruction of the devices from the Surplus Store.
- Consider using an approved courier: FedEx Custom Critical preferred);
- USPS (critical data must be specified);
- World Courier
Campus and department may choose to purchase their own drive shredder. Shredders cost approximately $10,000 or more.
Campuses and departments could use a crusher instead, but should select a model that crushes a significant portion of the surface area of a device to assure that no drive platens are missed, and, should it be used for mobile devices, to assure destruction of memory chips. One such hard drive crusher is the Phiston MediaVise Drive Crusher from phiston.com. Once shredded or crushed, the drive may be recycled through the university’s approved e-waste vendor. Note: Most drive shredders/crushers will not accept larger sized mobile devices.
As always, incidents involving potential data exposure or breach should be communicated to firstname.lastname@example.org.
The Surplus Store will accept and process larger mobile devices that do not typically fit in a drive shredder/crusher as a whole unit.
The UISO is available for consultation.