{"id":106104,"date":"2017-04-07T14:41:07","date_gmt":"2017-04-07T18:41:07","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=106104"},"modified":"2017-04-10T10:35:37","modified_gmt":"2017-04-10T14:35:37","slug":"1-2-d-4-physically-destroying-reusable-storage-devices","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/about\/policies\/1-2-d-4-physically-destroying-reusable-storage-devices\/","title":{"rendered":"1.2.D.4 &#8211; Physically Destroying Reusable Storage Devices"},"content":{"rendered":"<p>This document supplements the requirements of BU Data Protection Guideline <a href=\"http:\/\/www.bu.edu\/policies\/information-security-home\/data-protection-standards\/data-protection-requirements\/\">1.2.D &#8211; Data Protection Requirements<\/a> <span>1.2.D &#8211; Data Protection Requirements<\/span>.\u00a0 It provides information related to the proper disposal of sensitive information in such a way as to prevent its continued use.<\/p>\n<h2>Overview<\/h2>\n<p>When data is no longer required it must be disposed of in a way that prevents its continued use.\u00a0\u00a0 Electronic data can be difficult to dispose of effectively.\u00a0 Reusable storage devices are intended to have a long service life and may be erased and rewritten continuously during their life.\u00a0 Hard disk drives, USB storage devices, solid-state memory cards, portable disk drives, floppy diskettes, and data storage tapes are all examples of media intended for reuse.<\/p>\n<p>There are legal, regulatory, contractual, and policy requirements that may extend the duration for which information must be retained beyond its useful life.\u00a0 Before disposing of data please review the <a href=\"http:\/\/www.bu.edu\/policies\/finance-administration\/record-retention\/\">University Record Retention Policy (FA-002)<\/a>.\u00a0 DO NOT destroy paper or electronic records that the <a href=\"http:\/\/www.bu.edu\/policies\/finance-administration\/record-retention\/\">University Record Retention Policy (FA-002)<\/a> requires be maintained.\u00a0 In addition, DO NOT destroy records if you have received a \u201clitigation hold\u201d notice from the Office of the General Counsel concerning actual or threatened litigation or if you have reason to believe that documents relate to a dispute that may result in litigation.\u00a0 If you have any questions, please contact BU Information Security or the Office of the General Counsel before you destroy either paper or electronic records.<\/p>\n<h2>When Physical Destruction of a Device is Required<\/h2>\n<p>In some cases, even securely erasing a disk does not provide adequate protection against unintended disclosure or loss of data.\u00a0 In these cases the device must be physically destroyed.<\/p>\n<p>A reusable device must be physically destroyed when:<\/p>\n<ul>\n<li>It contains any Confidential or Restricted Use information and it is not possible to delete the data because the device hardware has failed.<\/li>\n<li>It contains any electronic Protected Health Information (ePHI) as defined in the <a href=\"https:\/\/www.bu.edu\/tech\/files\/2010\/04\/BU-100-003-Device-Media-Controls.pdf\">Device and Media Control Policy (BU-100-003)<\/a>.<\/li>\n<\/ul>\n<p>This means that for systems storing Confidential or Restricted Use information it is not possible to return the device to the hardware vendor for warranty or contract-based hardware support.\u00a0 This will likely incur an additional hardware cost to the department to support machines containing this information when such events occur.<\/p>\n<p>It is important that these requirements are also made clear to individuals storing Confidential information on personally owned computers and devices.\u00a0 These devices are subject to the same terms, but replacement may be at the owner\u2019s expense.\u00a0 Restricted Use information may not be stored on personally owned computers and devices.<\/p>\n<p>Proper physical destruction requires special tools and equipment.\u00a0 Information Services and Technology offers a Media Destruction service.\u00a0 Please see the following URL for more information:<\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"3UeJHF2wU7\"><p><a href=\"https:\/\/www.bu.edu\/tech\/services\/infrastructure\/storage-backup\/media-destruction\/\">Media Destruction<\/a><\/p><\/blockquote>\n<p><iframe class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;Media Destruction&#8221; &#8212; TechWeb\" src=\"https:\/\/www.bu.edu\/tech\/services\/infrastructure\/storage-backup\/media-destruction\/embed\/#?secret=3UeJHF2wU7\" data-secret=\"3UeJHF2wU7\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This document supplements the requirements of BU Data Protection Guideline 1.2.D &#8211; Data Protection Requirements 1.2.D &#8211; Data Protection Requirements.\u00a0 It provides information related to the proper disposal of sensitive information in such a way as to prevent its continued use. Overview When data is no longer required it must be disposed of in a&#8230;<\/p>\n","protected":false},"author":4697,"featured_media":0,"parent":21310,"menu_order":10,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/106104"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/4697"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=106104"}],"version-history":[{"count":1,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/106104\/revisions"}],"predecessor-version":[{"id":106105,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/106104\/revisions\/106105"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/21310"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=106104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}