Storage drives

Guidelines

CDROM/DVD

The most effective method for destroying CDROM/DVD media is to use a paper shredder rated tool. Large batches of CD’s that do not contain critical data can be destroyed using a CD “dimpler”.

Risk: Breaking CD media by bending it or striking it with force can result in bodily injury from flying debris.

Magnetic tape

A degausser, appropriately rated for the tape media type to be erased, is the best way to remove data from a backup tape.

Risk: Merely breaking the case of a tape cartridge does not remove the data on the tape media, and doing so can result in bodily injury from flying debris.

Hard drives, mobile devices

For devices and media such as hard drives, mobile devices and flash media, the most effective method of destruction is the use of a shredder or drive crusher.

Risk: Destruction of devices using a drill can result in bodily injury from flying debris.

Disposal options

IU Bloomington

Make use of the IU Surplus Store's drive shredding service.

IUPUI

Use the IUPUI Surplus Store pickup service or deliver the drive to the store for secure storage pending transportation to the Surplus Store at IU Bloomington for shredding.

Regional campuses

If on a regional campus, departments may transport drives/devices to IU Bloomington to be shredded. Considerations include:

  • Risk to an individual while traveling
  • Risk to IU should devices be lost or stolen while being transported, resulting in a data exposure.
  • Frequency of travel. Unwiped nonfunctional devices should sit no longer than 90 days.
  • Selection of an appropriate person to transport the devices: IU full-time, non-student employees may transport failed devices for disposal.
    • The employee who will transport the devices should understand the potential sensitivity of the data that may reside on the devices and the risk to IU in the event of a data exposure.
    • The employee should take appropriate precautions to protect the devices, such as keeping the vehicle locked when unattended and stowing the devices out of sight.
    • The employee should take as direct of a route as possible to the location of the drive shredder while avoiding unnecessary stops, overnight stays or side trips.
  • Include a printed list of devices and their serial numbers with the shipment and keep a copy for your reference. Request acknowledgement of receipt and destruction of the devices from the Surplus Store.
  • Consider using an approved courier: FedEx Custom Critical preferred); 
  • USPS (critical data must be specified); 
  • World Courier

Alternatives

Campus and department may choose to purchase their own drive shredder. Shredders cost approximately $10,000 or more.

Campuses and departments could use a crusher instead, but should select a model that crushes a significant portion of the surface area of a device to assure that no drive platens are missed, and, should it be used for mobile devices, to assure destruction of memory chips. One such hard drive crusher is the Phiston MediaVise Drive Crusher from phiston.com. Once shredded or crushed, the drive may be recycled through the university’s approved e-waste vendor. Note: Most drive shredders/crushers will not accept larger sized mobile devices.

Additional considerations

As always, incidents involving potential data exposure or breach should be communicated to it-incident@iu.edu.

The Surplus Store will accept and process larger mobile devices that do not typically fit in a drive shredder/crusher as a whole unit.

The UISO is available for consultation.