22 Nov Getting rid of your old printer? Why its critical to clean or remove the hard drive
Most people know that when it’s time to sell, donate or give away an old computer, you should erase any photos, financial documents and private data stored on the hard drive. But not as many people are aware that used printers can also retain the same personal data.
Here is what you need to know about erasing or destroying confidential information when your printer reaches the end of its useful life.
What is stored on your printer?
Just like a computer, printers have both volatile memory (like computer RAM) and non-volatile memory (like computer hard drives). Volatile memory disappears when you turn the printer off, but non-volatile memory sticks around until it’s deleted.
In other words, many office printers have many of the same features of a computer or mobile device— hard drives, system memory, an operating system and applications. That means your printer has the same capabilities— and security risks— as any other device you own.
How to successfully wipe your printers memory?
For a home printer, if you just printed a scanned copy of all your credit cards and now you want to sell your printer on eBay, you need to scan or print enough non-confidential documents to overwrite the data held in memory. To accomplish this, you can usually just print 5 to 10 complicated documents, such as pictures or anything besides plain text.
However, be aware that advanced office multifunction devices have non-volatile memory measured in gigabytes, and it would take a long time to overwrite the data stored there. Before purchasing new multifunction devices, check with the manufacturer or dealership to see if it is possible to wipe any saved data from your machines. (As you will see below, we ensure that all data is overwritten and destroyed at the end of a machine’s service.)
Digitally cleaning your printers hard drive
If you are getting rid of an old printer and need to make sure there is no important data which could be stolen or found by a new owner, you need to either overwrite the data or destroy the memory device.
For example, all Xerox devices are equipped with hard disk drives with standard features in place to protect the information on their internal hard drive to prevent the misuse or theft of the stored data. The image data from routine job processing is temporarily written to the HDD in a proprietary Xerox file format.
The HDD Data Erase Kit, which is now standard on Xerox Altalink models and VersaLink models, enables system administrators to configure their Xerox MFPs to overwrite the internal image server hard disk and erase previous data as part of routine job processing.
What we do with our customer’s printer hard drives
All our devices include enterprise-grade Hard Drive Encryption out of the box. Any data held on the device can only be retrieved by a host with the encryption key stored in the hardware of the device. In addition, we ensure that all data is overwritten and destroyed at the end of a machine’s service.
At the end of service, hard drives are erased when they arrive back at our service center. Hard drives will be removed, wiped according to the Ministry of Defense security standards and destruction certificates can be provided upon request. Hard drives can also be removed and kept by the customer at cost if specified in advance.
Of course, before you get rid of any personal devices, you should think about what information it might be storing. It’s especially critical to wipe computers, smartphones and tablets, but other devices you might not expect can store data as well, including printers.
Xerox Secure Printing Features
- Xerox® Secure Print. Don’t let your confidential or private documents sit in the output tray, open for viewing, at risk of being taken by someone else. Secure Print allows you to control the print timing of your documents. Enter a pass code to send a job to print. The printer holds the job until you enter the same pass code at the device, releasing it to print.
- Image Overwrite. Electronically “shred” information stored on a printer’s or MFP’s hard disk as part of routine job processing. Electronic deletion may be performed automatically, on-demand or, on some devices, scheduled. The Xerox® Image Overwrite print security process uses a three-pass algorithm originally specified by the U.S. Department of Defense.
- Data Encryption. As data moves in and out of a printer or MFP, or is stored within the device, we secure it with several different protocols for encryption, such as Secure Sockets Layer (SSL)/Transport Layer Security (TLS) and Internet Protocol Security (IPSec).
- Access Control/User Authorization. Specific functions (such as scanning, or accessing customer data) can be restricted by user and by function according to access control limits set by a system administrator. Authorized users may be granted appropriate levels of access once they are logged on or authenticated.
- Removable Hard Disk Drive Accessory/Kit. Allows a system administrator to quickly and easily remove hard drives and lock them up for a storage, which eliminates risks of unauthorized access when the device is unattended. This is helpful to secure print data that is subject to legal regulations (such as HIPAA or PCI), or might have a customer database containing sensitive information.
- Network Security. To ensure your device behaves like a good network citizen, many Xerox printers and MFPs include features that protect them from unauthorized remote access. These secure print features protect the confidentiality of data as it moves across your network, to and from the printer. These print security features include IPFiltering, IPSec and SSL/TLS data encryption, digital certificates, network authentication and 802.1x device authentication.