PROCEDURE FOR DATA REMOVAL - COMPUTER SYSTEMS
Once computer equipment containing data has been deemed to be surplus, the following should occur to erase the data:
Replaced computer systems are often recycled within a University unit. This is a consideration noted on the IT Information for Surplus Property Form supplied by MUN IT-classified employees when de-commissioning a computer system. Other than intra or inter-departmental equipment transfers, there are three standard options for handling old or obsolete computer systems, and these are covered on the IT Information for Surplus Property Form. They are, depending on the classification of the computer, to:
(1) declare the equipment as surplus,
(2) donate the equipment to the Computers for Schools (CFS) Program or
(3) provide the equipment to the Computer Purchasing Centre (CPC) under its Re-distribution Program for a credit (See http://www.campuscomputerstore.ca/memorial/content/rdprogram/
These options are outlined in more detail on the IT Information for Surplus Property Form. This form may be provided by IT-classified staff, as part of the computer system replacement process. If provided, this completed form is to be passed, for informational purposes, to staff in your division who are responsible for asset tracking and financial transfers.
Qualifying Computers for Schools (CFS) Program donations require completion of the corresponding section on the Surplus Property form. CFS systems are signed for by CFS staff on the Surplus Property form. The program ensures appropriate data removal processes before re-deployment.
Qualifying Computer Purchasing Centre (CPC) Re-distribution Program systems are removed from Fixed Assets through the return process. The CPC ensures appropriate data removal processes before re-deployment and issues credit to the supplied FOAPAL for qualifying systems.
Once a department has identified computer property to be disposed of, or transferred, approval from the appropriate Dean or Director or his or her designate is required prior to requesting data removal by IT-classified staff. Erasure of any records from computer components and media must be in keeping with Records Management Policy. Verification of adherence to the Records Management Policy for computer systems must be provided by the Administrative Signing Authority on the Surplus Property form, prior to designated IT-classified staff permanently removing data from storage devices. Data on computers designated for transfer, surplus or disposal must be erased or otherwise destroyed after data necessary to be retained is backed up or transferred to an alternate storage device. Staff with administrative signing authority will ensure that necessary data retention (as per the Records Management Policy) has been accomplished and will verify this by signing the Surplus Property form prior to making requests for data removal.
Computer systems and storage devices known to contain confidential information are to indicate so on the Surplus Property form. Those responsible for Administrative approval are to check confidentiality status as part of their review of the form. A more thorough data removal procedure will be employed for systems known to contain confidential information, otherwise, a basic data removal procedure will be employed. Computers containing confidential information are to be stored in a secure location while awaiting data removal procedures.
Instructions for IT-classified staff for data removal are available at http://www.mun.ca/cc/services/servicecatalogue/DataRemoval.php