Carnegie Mellon University

Guidelines for Data Protection - Media Sanitization and Disposal

Media, both electronic and paper format, contains Institutional Data, and must be protected from unauthorized access. 

Control Number

Control Name

Public

Private

Restricted

ME-1

Electronic Media is sanitized prior to reuse

Recommended

Required

Required

ME-2

Electronic and paper-based Media is destroyed prior to disposal

Optional

Required

Required

ME-3

Unencrypted media is protected from unauthorized access and accountability is maintained during transport

Optional

Required

Required

ME-4

Mark removable media with the data classification where it may be accessed outside of an authorized group of individuals

Optional

Recommended

Required