Data erasure or physical drive destruction: which should IT choose?

Data erasure or physical drive destruction: which should IT choose?

Choose based on the media, its condition, your security policy and whether it will be reused. Erasure can preserve compatible working media; physical destruction removes that reuse option. Both routes need an agreed result and records.

Start with the outcome

QuestionErasure routeDestruction route
Will the drive return to use?Assess a compatible erasure method and acceptance checks.The media will not be reusable.
Is the drive accessible and supported?Confirm access, tool support and successful completion.Consider when erasure is unavailable or fails.
Does policy mandate destruction?Do not substitute wiping without approval.Define a media-appropriate physical method.
What must the record show?Media ID, method, result and exceptions.Media ID, process completion and reconciliation.

A wipe command is only part of the work

First authorise the retirement and confirm that required data has been retained. Then identify every storage device, choose the treatment and define who accepts the outcome. This prevents a successful operation on one disk from being mistaken for clearance of an entire multi-drive system.

For SSDs and NVMe media, confirm the model and supported workflow rather than relying on an HDD overwrite assumption. Failed or inaccessible media needs its own approved route.

Use a simple decision sequence

  1. Record the equipment and media identifiers.
  2. Confirm policy and intended reuse, return or recycling.
  3. Assess media condition and compatibility.
  4. Agree the method, evidence and failure route.
  5. Reconcile results before releasing equipment.

NIST SP 800-88 Rev. 2: Guidelines for Media Sanitization provides current program guidance. Method selection and acceptance remain specific to the media and your organisation.

Buy the service your project needs

Ask for data erasure when retaining equipment is part of the plan. Ask for physical drive destruction when the media must not return to use. A mixed fleet can need both, with separate outcomes recorded against the same asset register.

Questions from corporate IT teams

Does deleting files count as a documented erasure service?

Deleting files or reinstalling an operating system alone does not establish an accepted sanitization outcome. Define the media treatment, checks and evidence with your IT security owner.

Related services and planning guides