Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Any material I've come up with for data destruction standards relate to completely wiping (ATA Secure Erase) and physically destroying hard drives, but I haven't been able to find much about standards for destroying individual files. Are there such standards, and if so how can they be properly followed?

share|improve this question
up vote 10 down vote accepted

1) With modern filesystems, there is no more concept of securely deleting an individual file. It might have been copied around, snapshotted, written to a different location upon editing, etc.

2) With modern drives, there is no deletion / wipe without confirming it. Some drives have had a Secure Wipe command flat-out lies to you, returning immediately while doing nothing.

  • See SSD (Flash Memory) security when data is encrypted in place
  • Use Full Disk Encryption.
  • Pretty much forget about the concept of securely deleting a file and knowing it is really gone. Even with a freespace wipe, you've still got cache files, preloads, snapshots, slack space (though some utilities wipe that)...
share|improve this answer

HIPAA regulations, as far as I can tell, do not specifically address the destruction of individual electronic files.

Under HIPAA, you have an obligation to ensure that PHI does not fall into the wrong hands. You can best accomplish this by protecting systems and networks, not individual files.

share|improve this answer

Wiping an individual file is much harder than wiping the whole disc, because of the number of places that parts of that file may end up.

Depending on the file system you have things like slack space; journalling; page files; fragments; etc etc.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.