Data Destruction
Data Management
Process that renders data irrecoverable, via physical destruction or key destruction with verified controls.
Definition
Data destruction includes physical destruction (shredding, crushing) or cryptographic destruction (destroying keys) when encryption is used. It should follow documented procedures, verification, and chain-of-custody controls.
Why this matters
Why it matters: It prevents recovery of sensitive personal data and supports compliance with retention limits.
Example
Example: Retire drives using a destruction vendor with certificates and verify that backups and replicas are handled per policy.