Kingston Partners With Ontrack

• GDPR has introduced a new right for individuals to have their personal data erased by companies storing their data, making secure erasure a pillar to guarantee compliance to the new regulation.
• A recent Ontrack security study shows people often fail to properly erase personal data in used drives, putting their own and others’ identity and privacy at risk
• The alliance aims at providing Kingston customers technology services to erase their data efficiently, ensuring full compliance to GDPR.

Kingston Technology company, Inc. is partnering with Kroll Ontrack, LLC, a provider of data recovery and erasure services, to offer data erasure services at advantageous rates to Kingston customers.

Ontrack offers a software-suite and provides technology services to help legal, corporate and government customers as well as consumers erase data. Through this alliance between two security vendors, Ontrack supports Kingston customers solving complex data GDPR challenges through cutting-edge erasure solutions.

The lack of secure erasure, be it through human or technical error or faulty erasure procedures, can lead to drastic impacts on businesses and organisations, now more than ever before taking into account the stringent requirements of data protection demanded by the enforced GDPR. Permanently deleting data takes time and resources, and data that is not completely expunged before the media is disposed of is vulnerable to exposure. To increase the security of anyone’s data, a secure, verified data destruction process is required.

A security study carried out by Ontrack in 2017 shows that people too often fail to properly erase personal data in used drives, putting their own and others’ identity and privacy at risk. In this study the data recovery company purchased 64 drives (37 HDDs and 27 SSDs) from various sources over eBay, and analysed whether the used drives had been wiped clean or still contained any traces of data. Among the drives examined, traces of data were found on nearly half, meaning that new owners had critical access into the previous owners’ identity. The data found included highly critical, sensitive, personal information, private documents, e-mails, contact details, address lists, online account names, passwords, critical business data, as well as critical transactional data (company names, salary statements, credit card numbers, bank account and investment info, tax returns). The study therefore shows that whenever data erasure is not performed accurately, selling personal digital devices can become a matter of identity protection.

The study differentiated between HDD and SSD drives, noting the growing trend toward SSD. Though SSDs were by no means immune to identity risk, they tended to facilitate more successful data wipes. The method previous owners used to erase the data on their drives before selling them demonstrated an all-too-common lackadaisical approach. Though erasure methodology could not be determined for every drive, at least eight had no attempt whatsoever directed at deleting its data. The general trend was evident: people are putting their identity and privacy far too easily at risk.

“The best method to delete data is to perform multiple overwrites, especially when data erasure needs to meet specific legal overwrite standards. Professional products distinguish themselves by the following features: independent certifications, using internationally standard algorithms, detailed reporting and traceability of executed deletions,” says Phil Bridge, SVP, data and storage technologies, Ontrack. “As the industry leader in data recovery and a global erasure services provider, Ontrack provides unparalleled expertise and recovery capabilities to accompany Kingston customers in their recovery and erasure need.“

Erasing SSDs – the challenges
Kingston, as manufacturer of SSDs, highlights that SSDs behave very differently from HDDs when saving data to or erasing data from them.

“These technological differences present their own technical challenges when it comes to securely deleting data from flash storage media. SSDs have several functions that affect the state of the stored data, such as FTL (Flash Translation Layer function), which controls the mapping of files, as well as wear levelling, Trim, Garbage Collection and always-on encryption, all of which influence the recoverability of deleted or discarded data,” says Robert Allen, EMEA director of marketing, Kingston Technology EMEA.

In those cases when data is too sensitive to leave their original location, or when the necessary conditions for secure erasure are missing, Ontrack is able to offer secure software erasure services when re-purposing or disposing of end of life media, and the deletion reports provided for each erasure can be used for audit and compliance purposes.

An alliance for secure data destruction and GDPR compliance 
Ontrack is able to provide standard erasure solutions by resorting to their tools and techniques.

The benefits of Kingston’s partnership with Ontrack include:

• 10% discount on Ontrack’s services;
• Erasure solutions carried out by experienced engineers for all types of Kingston storage devices;
• Service in more than 40 offices in 19 countries;
• Secure data destruction on any media for reuse or disposal;
• Assistance in verifying companies’ in-house erasure processes;
• Support in selecting and executing the best data destruction method according to needs;
• Provision of final certification of erasure.