Угроза утечки данных при переработке электронных отходов

Form of recycling

E waste presents a potential security threat to individuals and exporting countries. Hard drives that are not properly erased before the computer is disposed of can be reopened, exposing sensitive information. Credit card numbers, private financial data, account information and records of online transactions can be accessed by most willing individuals. Organized criminals in Ghana commonly search the drives for information to use in local scams.

There are ways to ensure that not only hardware is destroyed but also the private data on the hard drive. Having customer data stolen, lost, or misplaced contributes to the ever growing number of people who are affected by identity theft, which can cause corporations to lose more than just money. The image of a company that holds secure data, such as banks, law firms, pharmaceuticals, and credit corporations is also at risk. If a company's public image is hurt, it could cause consumers to not use their services and could cost millions in business losses and positive public relation campaigns. The cost of data breaches "varies widely, ranging from $90 to $50,000 (under HIPAA's new HITECH amendment, that came about through the American Recovery and Revitalization act of 2009), as per customer record, depending on whether the breach is “low profile” or “high profile” and the company is in a non regulated or highly regulated area, such as banking or medical institutions.”

There is also a major backlash from the consumer if there is a data breach in a company that is supposed to be trusted to protect their private information. If an organization has any consumer info on file, they must by law (Red Flags Clarification act of 2010) have written information protection policies and procedures in place, that serve to combat, mitigate, and detect vulnerable areas that could result in identity theft. The United States Department of Defense has published a standard to which recyclers and individuals may meet in order to satisfy HIPAA requirements.

Countries have developed standards, aimed at businesses and with the purpose of ensuring the security of Data contained in 'confidential' computer media [NIST 800–88: US standard for Data Remanence][HMG CESG IS5, Baseline & Enhanced, UK Government Protocol for Data Destruction]. National Association for Information Destruction (NAID) "is the international trade association for companies providing information destruction services. Suppliers of products, equipment and services to destruction companies are also eligible for membership. NAID's mission is to promote the information destruction industry and the standards and ethics of its member companies." There are companies that follow the guidelines from NAID and also meet all Federal EPA and local DEP regulations. The typical process for computer recycling aims to securely destroy hard drives while still recycling the byproduct. A typical process for effective computer recycling:

Receive hardware for destruction in locked and securely transported vehicles. Shred hard drives. Separate all aluminum from the waste metals with an electromagnet. Collect and securely deliver the shredded remains to an aluminum recycling plant. Mold the remaining hard drive parts into aluminum ingots. The Asset Disposal and Information Security Alliance (ADISA) publishes an ADISA IT Asset Disposal Security Standard that covers all phases of the e waste disposal process from collection to transportation, storage and sanitization's at the disposal facility. It also conducts periodic audits of disposal vendors.