Recently, we wrote about how the office copier and multi-function printer poses an increasing security threat (Privacy Threats – Part I), in that any equipment manufactured after 2002 contains a hard drive and therefore stores potentially damaging information.
A CBS national report aired a year or two ago brought the problem into sharp focus, showing how simple it is to purchase a used copier from a warehouse where units, formerly leased to businesses, had been turned back in and were being re-sold to businesses in the US as well as overseas.
It’s understandable why these machines would be considered a good buy. Off-lease copiers still have lots of “shelf life” remaining. A copier in service at a bank for 3 years, for example, might still be very marketable, selling at a fraction of its original cost, to a print shop or a small business without the high-volume requirements that the bank might have had.
But, the seller turns this equipment in at his or her own peril, unless steps are taken to remove the data stored on the hard drive with the original machine. Consider what information most businesses store on their copiers – paychecks, Social Security, birth certificates, bank records, income tax forms, healthcare records and much more.
The document generation industry has taken initial steps to address this concern, and undoubtedly greater precautions are forthcoming. Konica Minolta has built-in protection on their equipment which over-writes data and then encrypts it. SHARP offers a similar solution in its Data Security Kit.
Before you turn in your copier or MFP, here are some steps you should consider.
- First, ask your office product dealer or trusted technician if there is a device in place to overwrite or erase the data that is on the hard drive; and if so, be certain that it is functioning correctly.
- If not, ask about add-on options that will overwrite the data so that it is not accessible.
- Or, ask about your dealer’s protocol is for dealing with hard drives where the information is stored. If the equipment does not come with an over-write option, the dealer may remove the hard drives, shred them and replace them with new drives.
In some instances, the manufacturer-provided solution (overwriting) may be sufficient. But if you are in a business that is concerned with provisions of HIPAA and Sarbanes-Oxley, a more aggressive treatment may be in order. Be absolutely certain, when returning or selling a copier, that all the information on the hard drive has been properly disposed of. If you have questions, don’t hesitate to give us a call.
To see a short video on what Sharp’s security package has to offer, click here.









