What is a data purge?
Definition
A data purge is the permanent removal of data so that it cannot be recovered. In NIST's media sanitization guidance, purge means making recovery infeasible even with state-of-the-art laboratory techniques.
- Category
- Data
- Also called
- purge data, purging data, Purge (data)
- Last updated
People use data purge loosely for deleting old records. The most precise definition comes from NIST's guidelines for media sanitization (SP 800-88), which sets three levels.
- Clear uses logical techniques, such as overwriting, to protect against simple, non-invasive recovery.
- Purge applies physical or logical techniques that make recovering the data infeasible even with state-of-the-art laboratory techniques. NIST lists cryptographic erase, which sanitizes the encryption key protecting the data, as a purge technique.
- Destroy makes recovery infeasible and leaves the media unusable, for example by shredding or incineration.
Why it differs from deleting
Dragging a file to the trash or emptying a recycle bin removes the pointer, not necessarily the data. That is why NIST separates deletion from sanitization, and why old phones and drives can leak details when sold or recycled.
A typical case: you sell a laptop after a simple delete. Purging the drive first, or using its built-in secure erase or encryption key reset, is what stops the next owner recovering your files.
Purge vs. removal from other companies
Purging acts on storage you control. It cannot pull your data back from a company that already holds a copy. That takes a deletion request to the company.
How to protect yourself
- 1
Encrypt your devices
With full-disk encryption on, destroying the key can make the data unreadable, which is the cryptographic erase NIST describes.
- 2
Wipe before you sell or recycle
Use the device's factory reset with encryption on, or the manufacturer's secure erase tool, and sign out of your accounts first.
- 3
Destroy media you can't wipe
For old drives that won't work, physical destruction is the sure option.
- 4
Ask companies to delete your data
Serus finds the data brokers that hold your details and files removal requests for you.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
Is purging data the same as deleting it?
No. Deleting usually removes a file's pointer. A purge uses methods that make recovery infeasible, even for a well-equipped lab.
Does a factory reset purge my phone?
It depends on the device. NIST describes clear and purge as separate levels, and a reset that also erases the encryption key is closer to a purge. Check the maker's guidance.
Sources
Something wrong or out of date? Tell us and we'll re-check it.