The issue of secure data destruction is gaining critical mass. Of course, we have had the DoD 5220-22-M Standard for a long time now. Then came the NIST Special Publication 800-88, Guidelines for Media Sanitization (http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf), which was firmly embraced in the healthcare context by the Department of Health and Human Services in its 2009 Guidance in connection with the new HITECH Act. Other standards or recommended procedures followed. The latest development is the guidance the FDIC has just issued to Financial Institutions for secure data destruction (http://www.fdic.gov/news/news/financial/2010/fil10056.pdf). These various standards and guidances all make clear that organizations handling sensitive personally identifiable data must address secure destruction, both internally and in their vendor relationships. Related content opinion Finding Common Threads in Privacy and Information Security Laws. By Michael Overly Apr 26, 2013 3 mins Compliance opinion Ensure Your Data is Securely Deleted By Michael Overly Mar 11, 2013 2 mins Cloud Security opinion CIA in the Cloud By Michael Overly Dec 18, 2012 2 mins Cloud Security opinion Overreacting to Information Security By Michael Overly Dec 10, 2012 2 mins Privacy Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe