To dispose of a hard drive securely in Singapore, its data must be made unrecoverable first, either by certified data erasure (if the drive will be reused) or by physical destruction (if it will not). Deleting files or formatting the drive is not enough.
Old hard drives from laptops, desktops, servers and storage systems often still hold customer records, employee files, emails and financial data long after they are taken out of service. This guide explains why simple deletion fails, the methods that actually work, what Singapore’s PDPA expects, and what proof you should keep.
If you need drives handled for your business, see our hard drive destruction service in Singapore.
Why deleting or formatting is not enough
When you delete a file or format a drive, the operating system only removes the pointers to the data. The data itself stays on the disk until it is overwritten, and free recovery software can often bring it back.
That is why a drive that looks empty can still expose personal data if it is sold, donated, lost or thrown away. Secure disposal means removing the data permanently, not just hiding it.
Why securely disposing of hard drives matters
- Data breach risk: discarded drives are a common source of leaked personal and business data.
- PDPA compliance: organisations must protect personal data until it is destroyed.
- Reputation: a single leaked drive can damage customer trust.
- Environment: hard drives contain metals and components that should be recycled properly, not sent to landfill.
3 ways to remove data from a hard drive
| Method | How it works | Drive reusable? | Best for |
|---|---|---|---|
| Data erasure (data wiping) | Software overwrites every sector so data cannot be recovered | Yes | Working drives to be resold, reused or returned at lease end |
| Degaussing | A strong magnetic field scrambles the data on magnetic platters | No | Traditional spinning hard drives (HDDs) and tapes |
| Physical destruction | The drive is shredded or crushed so it cannot be read | No | Faulty drives, highly sensitive data, or when you want visible proof |
Many businesses combine methods, for example degaussing a drive and then shredding it, or erasing working drives and destroying the faulty ones.
HDDs vs SSDs: why the method matters
HDDs (hard disk drives) store data on spinning magnetic platters. They can be erased, degaussed or physically destroyed.
SSDs (solid state drives) store data on memory chips. Degaussing does not work on SSDs, because they do not store data magnetically. SSDs should be erased with software designed for them, or physically destroyed so the memory chips themselves are broken.
Laptops made in recent years mostly use SSDs, so check what type of drive you have before choosing a method.
Erase or destroy: which should you choose?
- Choose erasure if the drive still works and you want to reuse, resell or return it. Erasure following the NIST 800-88 standard is widely accepted for this.
- Choose destruction if the drive is faulty, very old, held highly sensitive data, or your policy requires physical destruction.
- Not sure? Erase working drives and destroy the rest. This recovers value from usable equipment while removing all risk from the remainder.
Hard drive disposal and the PDPA
Singapore’s Personal Data Protection Act requires organisations to make reasonable security arrangements to protect personal data, and to stop keeping personal data once it is no longer needed.
For old hard drives, that means two things: keep them secured until the data is removed, and use a method that makes the data unrecoverable. Keeping a record of how and when each drive was handled helps show you took reasonable steps.
On-site vs off-site destruction
On-site means the drives are erased or destroyed at your premises, so they never leave your control. Some companies prefer this for very sensitive data.
Off-site means the drives are collected in sealed containers, transported securely and processed at the provider’s facility. It is usually more practical for larger volumes.
Either way, ask the provider how drives are counted, sealed and tracked between your office and the point of destruction.
What should a Certificate of Destruction show?
A Certificate of Destruction is your proof that the data was removed properly. A good one includes:
- your company name
- the date of collection and destruction
- the number and type of drives
- serial numbers, where provided
- the method used (erasure, degaussing or shredding)
- a certificate or job reference number
Keep it with your records for audits, internal reviews and data protection documentation.
How to dispose of company hard drives: step by step
- List the drives and devices to be disposed of.
- Decide which can be reused and which should be destroyed.
- Store them in a locked area until collection.
- Engage an NEA-licensed provider.
- Have drives counted and sealed at handover.
- Erase, degauss or destroy them according to your decision.
- Collect the Certificate of Destruction or erasure report.
- Make sure leftover materials are recycled responsibly.
What to check before choosing a provider
| What to check | Why it matters |
|---|---|
| NEA licence | Confirms the provider is authorised to collect and dispose of waste |
| Erasure standard | NIST 800-88 is the widely recognised benchmark |
| SSD capability | Not every method works on SSDs |
| Chain of custody | Sealed containers and counts reduce risk in transit |
| Certificate per job | Gives you proof for audits |
| Recycling after destruction | Keeps metals and components out of landfill |
You can confirm a company’s licence on NEA’s website, under the List of General Waste Collectors.
Frequently asked questions
Does formatting a hard drive delete all data?
No. Formatting removes the file system, not the data itself. The data can often be recovered with free software until it is overwritten or the drive is destroyed.
Is it better to wipe or destroy a hard drive?
Wipe it if the drive works and you want to reuse or resell it. Destroy it if it is faulty, held highly sensitive data, or your policy requires physical destruction.
Can SSDs be degaussed?
No. SSDs store data on memory chips, not magnetic platters, so degaussing has no effect. They should be erased with suitable software or physically destroyed.
Can I throw old hard drives in the e-waste bin?
Not before the data is removed. E-waste bins are for recycling, not data security. Wipe or destroy the drive first.
Do I get proof that my drives were destroyed?
A professional provider should issue a Certificate of Destruction listing the date, the number of drives and the method used. Ask for one before you book.
Secure hard drive disposal with Arkiva
Arkiva is an NEA-licensed, ISO 9001 and ISO 14001 certified data destruction company in Singapore. We handle hard drives, SSDs and other storage media for businesses of every size, through NIST 800-88 data erasure, degaussing or physical destruction, with a certificate for every job.
Have old drives to dispose of? See our hard drive destruction service, or request a quote.