Standards Group:
YALE-MSS-7: Data Protection
YALE-MSS-7.4: Re-use or dispose of systems securely
Details
Before re-use or disposal, data on electronic media/devices must be properly managed.
Electronic media/devices must undergo a complete removal of their data.
When an IT system has become defunct, it must be securely disposed.
Before re-use or disposal, if the data are not available anywhere else, the University may require you to keep them. Review the Yale Records Retention Schedule maintained by the Office of General Counsel. This outlines how long certain records must be preserved.
For re-use, end users (for endpoints) should reach out to their local IT support provider to ensure data are securely removed. See the Guideline for Repurposing and Recycling IT Systems Securely for more details.
For disposal, follow Yale's Environmental Health and Safety (EHS) process. Before disposing the device, make sure its data are securely removed.
Devices with electronic protected health information (ePHI) or other sensitive data must remain in a secured location while awaiting pickup for disposal.