Keep your personal data off the market

Looking to sell your old PC or other data-filled gadget? Here’s what you need to know to keep your personal information safe.

In 2003, author and security pioneer Simson Garfinkel conducted a study of data he found on second-hand hard drives. On eBay, Garfinkel bought the hard drive from an old ATM machine; it held 827 bank account PINs. Another drive he purchased on eBay had previously been owned by a medical center and contained information on 31,000 credit card numbers.

That was seven years ago, and the amount of data found on used or resold machines isn't on the downswing. A study published last year by Kessler International found that nearly half of the drives purchased from eBay contained personal data such as e-mail, photos, and confidential documents.

Data, Data, Everywhere

When Garfinkel did his study in 2003, desktop computers still ruled over notebooks; mobile phones were just phones; and gadgets like USB thumb drives, MP3 players, and digital cameras weren't as common as they are now.

To be sure, hard drives re­­main a serious data security concern today, but your data may also be in places you may not have considered. Case in point: I recently bought a used Chrysler Town & Country minivan decked out with an array of bells and whistles, including a fancy MyGig entertainment system with a 20GB hard drive for storing MP3s and photos. When I began to load the MyGig hard drive with my vast MP3 music library, I discovered that the drive already contained files that the previous owner had failed to remove.

They were just music files--not even music I like--so no compromise of sensitive information existed in this case. However, had the previous owner loaded the MyGig with personal family photos, it could have been another story.

The point is that data resides almost everywhere these days, and you must be vigilant about removing such data before you part with your PC, other gadget, or vehicle. Though excised data is almost always recoverable to some degree, you can take steps to ensure that the average individual buying your used equipment can't access your old files.

Wipe Your Data

At the moment, PC sales are up, thanks to a rebounding economy and Microsoft's Windows 7. An increase in sales also means an uptick in the disposal of old computers to make way for brand-new ones.

First, you should understand that neither deleting files nor reformatting your hard drive will suffice to eradicate data permanently. Both processes really just remove the information that the hard drive needs to find the data--sort of like smoothing out a dog-eared corner that someone has folded down on the page of a book.

To ensure that your data is removed beyond anyone's practical ability to recover it, you must remove or scramble the data itself, not just the marker that points to it. And that means you need to use a wiping or erasing utility. These tools overwrite every sector of the hard drive with binary ones and zeros, and those that meet government security standards overwrite each sector multiple times for added protection.

Tools like the US$30 CyberCide can completely and securely obliterate the data on your PC or hard drive before you dispose of it. Many such utilities are available, and they employ multiple methods for wiping data--including those that meet U.S. Department of Defense standards for secure data removal. (See more tips on erasing a hard drive.)

Fewer tools exist for other gadgets. Removable storage devices such as SD cards can be plugged into a computer and wiped by the same utilities that work for computers and hard drives.

Devices like the Apple iPhone and the iPod Touch have storage capacities of up to 64GB built in. Before passing on your iPhone, go into the device's Settings and choose General, Reset, Erase All Content and Settings to clear your data.

Members of the latest generation--the iPhone 3GS, and the 32GB and 64GB iPod Touch devices introduced in 2009--have built-in hardware encryption. Select Erase All Content and Settings on these devices to delete the encryption key and render the data useless.

Older iPhones and iPods simply overwrite the data with a series of ones and zeros. The process can take hours, de­­pending on the capacity of the device, but it at least ensures that the next owner of the iPhone won't have access to any of your personal information.

Obliterate the Media

If all else fails, physically destroying the device will generally ensure that no one can access the data on it. Even physical destruction has to be done properly, however, to guarantee that the data cannot be recovered. An entire industry specializes in retrieving information from storage media that has been damaged in fires, floods, or other disasters.

Some firms ensure physical destruction by using a product like the Guardian Physical Drive Destroyer (see a video of this product).

You could just use a sledgehammer, of course, but unless you do a very thorough job, it may still be possible to recover data from the drive platters.

Join the PC World newsletter!

Error: Please check your email address.

Tags securityprivacy

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tony Bradley

PC World (US online)
Show Comments

Most Popular Reviews

Latest News Articles


PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?