NIST 800-88 Explained: Clear, Purge, and Destroy for Media Sanitization

NIST Special Publication 800-88, “Guidelines for Media Sanitization,” is the most widely used U.S. standard for removing data from storage devices before they are reused, recycled, or thrown away. It is published by the National Institute of Standards and Technology. Revision 2 was published in September 2025 and replaces Revision 1 from 2014.

Government agencies use NIST 800-88 directly, and many private companies, auditors, and insurers point to it as the benchmark for proper data destruction.

The Three Levels of Sanitization

• Clear: overwriting data using standard read and write commands, such as overwriting the drive or using a factory reset. Protects against simple recovery tools.
• Purge: stronger methods that protect against lab-level recovery, such as cryptographic erase, block erase, or degaussing magnetic media.
• Destroy: physically destroying the media by shredding, disintegrating, pulverizing, or incinerating it so it can never be used or read again.

Which level you need depends on how sensitive the data is and whether the device will leave your control. Drives that held patient records, financial data, or confidential business information and are being retired are often best handled by destruction.

Why Many Businesses Choose Destruction

Clear and Purge methods depend on the drive type, the manufacturer, and whether the process was run correctly. They also need to be verified. Solid-state drives are especially tricky because data can remain in areas that overwriting does not reach. Physical destruction removes the guesswork and works on hard drives, SSDs, phones, tapes, and flash media alike.

Documentation Matters

NIST 800-88 stresses keeping records of sanitization. A good record lists the device type, serial number, the method used, the date, and who performed it. When Marshall Shredding destroys your media, you receive a Certificate of Destruction for your compliance file, and we follow a documented chain of custody from pickup to shredding.

How Marshall Shredding Helps

We are NAID AAA certified and physically shred hard drives, SSDs, phones, tapes, and USB drives. Choose on-site destruction to watch it happen, or off-site destruction for large batches. See our hard drive destruction service, or read how to destroy a hard drive.

Frequently Asked Questions

What is NIST 800-88?

NIST SP 800-88 is the National Institute of Standards and Technology guideline for media sanitization. It explains how to remove data from storage devices so it cannot be recovered.

What is the latest version of NIST 800-88?

Revision 2, published in September 2025. It replaces Revision 1 from December 2014.

What are Clear, Purge, and Destroy?

They are the three levels of sanitization. Clear overwrites data, Purge uses stronger methods like cryptographic erase or degaussing, and Destroy physically breaks the media so it cannot be read or reused.

Is physical shredding NIST 800-88 compliant?

Shredding is one of the destruction methods NIST 800-88 recognizes. Your organization should still document what was destroyed, when, and how.

Is NIST 800-88 required for private businesses?

It is required for many federal agencies and contractors. For private businesses it is usually voluntary, but auditors and regulators often use it as the benchmark for proper data disposal.

Get Secure Shredding From Marshall Shredding

Marshall Shredding has protected Texas businesses and homeowners for more than 25 years. Call (866) 487-4733 or request a free quote. Every service includes a Certificate of Destruction.