Potentially, Samsung could incinerate the devices, creating an environmental problem. But if the company decides to handle the removal of data from each phone, Steinnon said, it needs to follow these steps:
- For an Android device like the Note7, don't use a factory reset, since it only removes pointers to the data and leaves data accessible. Use a secure data erasure method to overwrite the data.
- Make sure the data erasure adheres to legally required overwriting standards, such as HMG Infosec and DoD 52220.22 M.
- Make sure the erasure solution is approved by government agencies like NATO, Department of Defense and others.
- Obtain proof of erasure, such as a tamper-proof certificate that can't be altered.
- Double-check that all the data was in fact, erased.
Blancco also offers a management console to companies for secure data erasure.
Sign up for CIO Asia eNewsletters.