Secure Media Disposal
What You Need to Know
The Secure Media Disposal Service, using an approved data destruction process, is required of all electronic media containing confidential Level 1 or Level 2 information, including:
- Hard drives
 - Solid State Drives (SSD),
 - Thumb drives
 - Cell phones
 
Refer to the Electronic Data Disposition Standard for more details on this requirement.
The free device shredding service has the following features
- Industrial Hard Drive Shredder
 - Service includes environmentally-conscious separation and recycling of all materials
 
And meets the following standards:
- DOD 5220.22-M standard
 - HIPAA (Health Insurance Portability and Accountability Act) Compliance
 - PCI-DSS (Payment Card Industry Data Security Standard) Compliance
 - NSA (National Security Agency)-Certified
 - California Senate Bill 1386 Compliance
 
Hours: M - F, 9 am - 3 pm
Who Has Access
- Staff
 - Faculty
 
Cost & Requirements
Cost
Its free for SJSU faculty and staff.
Requirements
- Create or update your list of all devices you will drop off
 - Remove device from its computer, enclosure, cage, or caddy
 - Place all the devices in a box
 - Drop off devices at the Computer Center
 
What You Need to Do
Follow these steps:
- Create or update your list of all the devices that require Secure Media Disposal.
                     This list may be useful in an audit. Departments are required to keep a list of all
                     devices for their records. Include the following information on your list:
                     
                     
- Manufacturer and serial number of device being shredded
 - Tag, manufacturer and serial number of the computer the device came from (where applicable)
 - Date of destruction or delivery to IT
 - Choose method of destruction: IT services can destroy your media or you can do it yourself using tools such as DBAN and KillDisk to securely remove the data
 
 - Remove the device from its computer, enclosure, cage or caddy, if shredding a hard drive. The shredding service only accepts bare drives.
 - Place all the devices in a box. Note:
                     
                     
- We only accept bare hard drives, USB drives, magnetic tapes, floppy disks, SSDs, CDs, cell phones and tablets
 - We will not accept hard drives that are still in their external enclosures or towers
 
 - Bring the box to the first floor lobby of the Computer Center and select 4-2345 or 4-2391. Our Staff should be able to assist you any time M - F, 9 am - 3 pm.
 
Oversight Process
- Our staff will accept delivery of your drives.
 - Your drives will be stored in a locked container inside our secured facility until physically destroyed.
 - We will maintain a record of serial numbers for all devices destroyed as well as certifications of destruction.
 
Additional Resources
Removing Resources
- DBAN - Hard Drive Eraser & Data Clearing Utility
 - KillDisk Hard Drive Sanitation Tool
 - Health Information Privacy: Disposal of Protected Health Information
 
Security Policies
- U.S. Department of Defense: Defense Security Service
 - National Industrial Security Program
 - National Security Agency/Central Security Service - Media Destruction Guidance
 - California Legislative Information: SB-1386 Personal information: privacy
 - PCI Security Standards Council
 
Support: Need Help or Have Questions
- Secure Media Disposal is a walk-up service provided in the first floor lobby of the Computer Center (also known as the Network Operations Center).
 - Select 4-2345 or 4-2391 for assistance.
 - Our Staff should be able to assist you any time M - F, 9 am - 3 pm.
 
You can also submit a help ticket request.