When a hard drive reaches end of life, simply deleting files isn't enough — and neither is formatting the drive. Data recovery tools can reconstruct deleted data from most drives within minutes, exposing your business to significant privacy and compliance risk.
Organisations retiring data-bearing equipment should identify their applicable security, privacy, contractual and record-keeping requirements before releasing devices.
This guide explains the methods available, when to use each, and what a compliant destruction certificate should cover.
When you delete a file on Windows or macOS, the operating system marks the storage space as available — but the data itself remains untouched until something overwrites that exact location. A standard format does the same thing at a slightly larger scale.
Free forensic tools (including some marketed openly online) can recover files deleted years ago. Court-used forensic tools are far more capable. Select and verify an appropriate sanitisation process for the media and the requirements that apply to your organisation.
Specialised software writes random data patterns across every sector of the drive, overwriting original data so that even laboratory recovery tools cannot reconstruct it. The drive remains physically intact and can be reused or remarketed.
Best for: Functional HDDs and SSDs being retired from service where physical destruction is not required. Drives can be resold after wiping, recovering value.
Not appropriate for: Failed drives, physically damaged media, or drives that cannot complete a full write cycle.
Industrial shredders reduce hard drives and SSDs to metal fragments typically 5–15mm in size. The required destruction outcome depends on the media, process and verification. Both HDDs and SSDs can be shredded — SSDs in particular can retain data through software wipes if the drive's firmware is compromised, making physical destruction the preferred method for high-security applications.
Best for: Failed or damaged drives, SSDs in healthcare or legal environments, classified data, drives that couldn't complete a software wipe, any situation where absolute certainty is required.
A degausser exposes the drive to a powerful magnetic field that randomises the magnetic polarisation of the platters, destroying all data and rendering the drive permanently non-functional. Only applies to spinning magnetic HDDs — has no effect on SSDs, flash storage, or optical media.
Best for: High volumes of HDDs where physical shredding capacity is limited, or as a pre-shredding step for maximum assurance.
Where your policy requires on-site treatment, specify this in your enquiry. Do not release the media until the method, operator, location and evidence have been agreed.
| Scenario | Recommended Method | Certificate Issued |
|---|---|---|
| Functional HDDs, general business data | NIST 800-88 Purge wipe | Yes — per-device with serial numbers |
| SSDs (any sensitivity level) | Cryptographic erase or shredding | Yes |
| Failed/damaged drives | Physical shredding | Yes |
| Healthcare, legal, government | Shredding ± degaussing | Yes — chain of custody report |
| Media that cannot leave site | On-site destruction | Yes — issued on-site |
A compliant certificate — one that will hold up under audit or Privacy Act investigation — should include:
Agree the evidence and record-retention requirements with the responsible person in your organisation. Requirements depend on the data, industry, contracts and applicable rules.
Solid-state drives (SSDs) present a unique challenge for data sanitisation:
For sensitive SSDs, select an approved treatment and verification process appropriate to the device and required assurance level.
It's not just spinning disks and SSDs. Data can persist on:
Tell us your equipment types, quantities, Perth suburb and data-handling requirements. We will confirm available methods, documentation, collection timing and any charges before you commit.
Get Free Quote → Contact UsKey Australian frameworks requiring documented data destruction:
See our full guide to IT asset disposal in Perth for broader compliance context.
Data wiping (software-based sanitisation) overwrites the drive's data to NIST 800-88 standards and leaves the drive functional for reuse. Physical destruction shreds, degausses, or crushes the drive, making it permanently unusable. Physical destruction is required for failed drives, SSDs in certain configurations, and high-security classifications.
Documentation requirements depend on the organisation, information, contracts and applicable rules. Agree the evidence needed with your responsible security or compliance adviser. A certificate does not by itself establish legal compliance.
Please tell us if media must remain on-site. On-site capability, methods and documentation must be confirmed for the specific job before equipment is released.
We handle single drives through to enterprise bulk disposal of hundreds or thousands of drives. Large volumes can be picked up from your Perth premises or delivered to our secure processing facility.
Ask about the proposed downstream route and available processing records. Recycling outcomes depend on the material, treatment and processor; confirm the scope for your job.
Contact: William Cai · Operated by JI CAI · ABN 57 985 974 812
info@itassetdisposal.com.au · 0431 882 201