= Data sanitization
\b[Data sanitization] is a process intended to make recovery of specified data from a storage medium infeasible at a stated level of effort. The target data, medium and recovery capability are part of the claim. Ordinary file deletion may remove a <file system> entry while leaving content recoverable; disappearance from a directory is not evidence of sanitization.<Guidelines for Media Sanitization by Ramaswamy Chandramouli and Eric A. Hibbard>[Abstract and sections2–3, recovery-based definition and sanitization methods]{ref}
The NIST framework distinguishes clear, purge and destroy: they address different recovery capabilities and whether the medium remains usable. The appropriate method depends on the medium and the information-protection objective. A device-independent slogan such as “deleting a file removes all its data” ignores those conditions.<Guidelines for Media Sanitization by Ramaswamy Chandramouli and Eric A. Hibbard>[Sections3.1.1–3.1.3, clear, purge and destroy]{ref}
A primary study by <Simson Garfinkel> and <Abhi Shelat> examined158 second-hand <hard disk drives> and found residual information on some readable devices. The study distinguished unreadable drives and warned that its sample was small relative to the larger used-drive market.<Remembrance of Data Passed: A Study of Disk Sanitization Practices by Simson Garfinkel and Abhi Shelat>[Pages24–26, Our experiment and conclusions]{ref} It supplies measured evidence of a disposal problem, not a timeless population-wide failure rate.
For an original scope example, suppose a document has one copy on a retired drive and one in an independent backup. Successfully sanitizing the retired drive does not sanitize the backup. The claim concerns the specified copy, not every occurrence of the information.
Similarly, verifying that an operation completed and deciding that its result adequately protects the target data are distinct judgments. The current NIST guide calls these verification and validation.<Guidelines for Media Sanitization by Ramaswamy Chandramouli and Eric A. Hibbard>[Sections4.5.1–4.5.2, outcome inspection and adequacy decision]{ref}
Back to article page
