NEW
Permanent removal of obsolete or sensitive data from systems according to policy and legal requirements.
DESCRIPTION
Data purging permanently and irreversibly removes data that is no longer required for operational, legal, or regulatory purposes. It reduces storage costs, minimizes breach exposure, and enforces retention schedules. Effective purging aligns with legal holds, records retention policies, and audit trails to demonstrate compliance. Organizations typically automate purging with lifecycle rules while preventing deletion for data under litigation hold. Unlike archiving, which preserves data in low-cost storage, purging ensures the information cannot be recovered.
ALTERNATIVE DEFINITIONS
NIST Special Publication 800-88 Revision 1
Purge: A media sanitization method that renders target data recovery infeasible using state of the art laboratory techniques.
Defines “purge” as a specific, rigorous media sanitization outcome beyond logical deletion.
Wikipedia
Data erasure is a software-based method of overwriting the data that aims to completely destroy all electronic data residing on a hard disk drive or other digital media.
Emphasizes software-based overwriting as a means of permanent data removal.
RELATED TERMS
Data Retention Records Management Legal Hold Right to be Forgotten Backup and Recovery Data Lifecycle Management Data Anonymization Media Sanitization
COMPETING TERMS
KNOWLEDGE AREAS
Data Management Data Governance Data Privacy & Compliance Data Security Data Storage & Operations
TARGET AUDIENCE
Data Governance Manager Data Steward Chief Data Officer Data Architect Cloud Architect DevOps Engineer Chief Information Officer Data Management Consultant
EXTERNAL SOURCES
- Wikipedia - Data erasure
- NIST - Authoritative media sanitization guidance
- UK Information Commissioner’s Office - Regulatory guidance on data deletion
TOP QUESTIONS
Why is Data Purging important for compliance?
Data Purging enforces retention limits and honors legal holds, reducing regulatory risk and exposure. It ensures organizations keep only necessary data and can demonstrate defensible deletion.
Category: Relevancy
How does Data Purging differ from Data Archiving?
Archiving preserves data for future reference in lower-cost storage, whereas Purging irreversibly removes it. Choose archiving for records you still need, purging for data you must dispose.
Category: Alternatives
What policies govern Data Purging?
Retention schedules, records management policies, and legal hold procedures govern when and how data is purged. Clear roles, approvals, and audit trails are essential controls.
Category: Requirements
What are common mistakes in Data Purging?
Purging data under legal hold, ignoring backups, and lacking audit logs are common mistakes. Another is failing to coordinate across systems, leaving recoverable remnants.
Category: Mistakes
How is Data Purging implemented in cloud storage?
Use lifecycle policies, retention locks, and versioning-aware deletion. Verify purge completes by also addressing snapshots, replicas, and cross-region backups.
Category: Application
Does Data Purging include backup tapes and snapshots?
Yes, thorough purging accounts for all copies, including backups, snapshots, caches, and DR replicas. Policies should specify when and how those media are sanitized.
Category: Management
What is the risk of inadequate Data Purging?
Residual data increases breach impact and legal exposure. It can also inflate storage costs and complicate right-to-erasure requests.
Category: Risks
How do legal holds affect Data Purging?
Legal holds suspend purging for relevant records until the hold is lifted. Systems should enforce holds automatically to prevent accidental deletion.
Category: Compliance
What’s a hot topic around Data Purging today?
Automated retention enforcement across multi-cloud and SaaS, with proof-of-deletion evidence and cryptographic erasure for encrypted stores, is increasingly in demand.
Category: Topic