What is an HDD?
A Hard Disk Drive (HDD) stores information magnetically on rotating platters. Enterprise estates include 3.5-inch desktop drives, 2.5-inch laptop drives and enterprise SAS/NL-SAS drives, with capacities from hundreds of GB to tens of TB.
Although enterprise storage is adopting SSDs, HDDs remain common in backup, surveillance, file servers and nearline storage. HDDs therefore still represent a substantial media category in enterprise ITAD.
Why is controlled destruction needed?
Deleting, formatting or repartitioning does not itself remove all HDD data. Deleted areas are typically marked as available for overwrite while the underlying content remains. Exposure can arise when:
- Untreated drives enter the secondary market and are accessed with recovery tools.
- Drives are lost or stolen during transport or storage.
- Retirement records are absent, preventing later demonstration of due care.
- Encryption exists but the associated keys are not addressed.
NIST SP 800-88 outcome levels
| Level | Method | Applicable sensitivity |
|---|---|---|
| Clear | Single-pass overwrite | Ordinary sensitive information |
| Purge | Degaussing or Cryptographic Erase | Highly sensitive information |
| Destroy | Physical shredding, perforation or melting | Highest-sensitivity or external disposition |
NIST SP 800-88 Rev.2 (2025) emphasizes enterprise media-sanitization programs and risk decisions. HDD Clear, Purge or Destroy decisions depend on sensitivity, media condition, control boundaries and organization-approved criteria.
DIN 66399 reference levels
Standards-version note: DIN lists DIN 66399:2012 as withdrawn and recommends ISO/IEC 21964. The levels and particle sizes below are retained from customer-supplied material for requirement discussions. Formal projects must confirm the adopted edition, equipment capability, contract and applicable law; this does not mean KYI is certified or a project is automatically compliant.
| Level | Particle-size criterion | Suggested context |
|---|---|---|
| H-3 | ≤ 320 mm² | Ordinary personal data |
| H-4 | ≤ 2,000 mm² (bent or deformed platters) | Confidential information |
| H-5 | ≤ 320 mm² platter fragments | Highly confidential |
| H-6 | ≤ 10 mm² | Government or military |
| H-7 | ≤ 5 mm² | Top-secret information |
Treatment-method comparison
Method A | Overwrite / Software Erasure
Software writes random data or zeros across the drive to replace existing content, subject to the approved method.
BenefitPreserves drive reuse and lifecycle extension, reduces e-waste, can be economical and can produce electronic verification reports.
LimitationsRequires a functioning drive; processing can take roughly 1–8 hours per drive depending on capacity. Failed drives or inaccessible bad areas require an alternative path.
KYI project contextEnterprises seeking reuse for ordinary or moderately sensitive data with sufficient processing time.
Method B | Degaussing
Apply an appropriate magnetic field to the HDD's magnetic structure so data is not reasonably accessible under the defined resource conditions. Equipment capability, media specifications and operating records must support the result.
BenefitDoes not require drive power, can process drives in seconds to tens of seconds and can address failed media. Verified equipment meeting the project-approved specification may support a Purge path.
LimitationsReuse is generally not available afterward. Field strength must match media coercivity; the method is ineffective for SSDs and requires suitable degaussing equipment.
KYI project contextHigh sensitivity, efficiency requirements or HDDs without remaining reuse value.
Important noteLow-cost consumer degaussers may be inadequate for modern high-coercivity HDDs, including enterprise SAS drives. Equipment selection must reflect the drive model and sensitivity.
Method C | Physical Destruction
Damage drive structure through shredding, perforation, deformation, melting or another approved process.
BenefitProvides visible and photographic evidence and may support a Destroy path when the required outcome is achieved.
LimitationsPrevents reuse. Confirm the project-adopted ISO 21964/DIN particle reference, site conditions and equipment capability.
KYI project contextHighly confidential information, financial or government projects, or a requirement for combined Degaussing and Physical Destruction.
Common pitfalls and misconceptions
- Misconception 1: Formatting is destruction Formatting alone does not establish sanitization; file-system structures may change while recoverable content remains.
- Misconception 2: A hammer is sufficient Uncontrolled DIY damage may leave platters or fragments insufficiently treated for the required recovery-risk outcome.
- Misconception 3: Degaussing needs no further confirmation Insufficient field strength for the media coercivity can result in incomplete sanitization.
- Pitfall 4: HDDs embedded in printers, copiers and multifunction devices These are often overlooked and may retain print history or scanned files. Include them in the retirement inventory.
KYI decision path
Start with three questions:
- Can the drive be reused? → If yes, assess overwrite; if no, assess Degaussing or destruction.
- How sensitive is the data? → Ordinary sensitivity: assess overwrite or Degaussing. Higher sensitivity: consider an approved combined Degaussing and Physical Destruction path.
- Will treatment occur off site? → On-Site: assess site-based Degaussing and destruction. Off-Site: preserve custody after packing through facility treatment.
KYI proposes the path and schedule during quotation; the customer selects and approves the scope.
Verification and records
A project HDD destruction record may include:
- Drive brand, model and serial (masking where agreed)
- Method, date, location and responsible personnel
- Applicable NIST outcome (Clear/Purge/Destroy)
- Applicable DIN 66399 reference level
- Imagery, if requested
Applicable industries
Finance, government, healthcare, listed companies, multinational operations in Taiwan, legal practices and accounting firms