Any business that handles and stores other people’s personal (PII), health (PHI) or credit (PCI) information is subject to rules and regulations (both state and federal) regarding the secure handling, storage and destruction of stored information. Yes, every company you share other people’s PII, PHI or PCI information with must provide a plan that begins when the storage device is removed from regular service through to the point that data is destroyed and documentation is provided stating when, how and by whom the data has been destroyed. In other words, if they don’t handle this correctly, you could be liable. Setting limitations and a pre-set protocol in writing before hand with companies you share sensitive data with is a good idea and can limit your liability. Yes, all the detail on how a device and data will be handled, stored, etc., needs to be defined and who is responsible for data destruction, when and how. Ultimately someone needs to be responsible for the data being destroyed and devices made safe, if it is done in-house, all the liability remains with your company. That is why it is beneficial to have Data Nukes handling your data destruction, because the sooner the devices are turned over to Data Nukes, the sooner your liability is transferred. Yes, for a very reasonable fee, Data Nukes will help you create a simple, yet effective plan for dealing with data storage devices. Whether you have one office or a hundred, are local in southern California or spread across the U.S., we can quickly develop a plan that will bring you into compliance from that point forward. Municipalities are not immune to the scrutiny of the legalities which protect other people’s sensitive information and whether your organization is private, public or municipal, we can develop a working plan to keep you in compliance. No, and protecting against post service data theft is a smart tactic to start while a small company. Absolutely. Data Nukes can do more than just destroy your data when your company works with us. If you are a national company or just out of our local pick up area, contact us and we can explain the ways we can help you with this process. We recommend this for all companies that have frequent need of data destruction. All Data Nuke clients have access to our electronics recycling company, Living Green Recycling. In addition, these services can be provided quickly and routinely if needed. Living Green Our costs are the best you will find for any similar services. We are business owners too and know it is fundamentally important to keep costs within reasonable parameters. We also appreciate our multi-service clients and can develop programs that are more favorable in these circumstances.Which businesses need a written plan for the secure handling of data storage devices and destruction of stored data, once removed from service? What devices need to be included in the plan for our company to be compliant and secure?
All devices that store this type of information and contain any sensitive information of others, is subject to these guidelines. Additionally, affiliates, associates and any other sub type contractor or provider of services to your company who has access to this stored information of others, is also subject to the same data security guidelines and your company is responsible for assuring their proper handling and destruction of shared sensitive information obtained through your company.Do the companies we share sensitive information with need a written plan as well? How does this expose our company if they are not in compliance?
Do we need a written plan if our IT department handles the data destruction in house?
Can Data nukes help our business with a plan to stay in compliance?
We are a municipal department, can Data Nukes help us with a plan and data destruction?
Does it matter what size of company we are, large or small?
Our company has multiple offices locally and nationally, can Data Nukes work with us?
Can Data Nukes set up a scheduled data destruction plan for our business?
Our company needs electronics recycling too, can Data Nukes set this up for us?
Recycling provides a responsible service providing security through proper use of R2, ISO and or e-Stewards for all down-line vendors. Additionally, LGR may provide other required services such as asset tag or serial number removal and comprehensive inventory reporting.Our company needs a Compliance Plan and Certified data Destruction, will this be expensive?