Software Based Data Destruction Assurance follow up
Case reference FOI2026/00389
Received 12 March 2026
Published 17 June 2026
Request
Please confirm:
1. Do the erasure certificates referred to in your response constitute an explicit outcome based warranty or guarantee that the personal data on each specific storage device has been rendered irrecoverable as a final data state, or do they primarily confirm that a certified erasure process was followed?
2. Beyond reliance on supplier certification, recognised standards, or confirmation that an erasure process was completed, does your organisation hold any recorded, device specific documentation evidencing independent verification, testing, or validation that the data on the particular storage media processed has been rendered irrecoverable in practice?
For clarity, this request relates specifically to recorded outcome evidence demonstrating irrecoverability of data on the individual storage device, not documentation confirming that an accredited or certified method was applied.
If no explicit outcome based warranty or device specific outcome evidence is held beyond certification, accreditation, or confirmation of process completion, please confirm accordingly.
I am not seeking technical configuration detail, only clarification of the recorded assurance basis relied upon when concluding irrecoverability of the final data state.
Response
1. Do the erasure certificates referred to in your response constitute an explicit outcome based warranty or guarantee that the personal data on each specific storage device has been rendered irrecoverable as a final data state, or do they primarily confirm that a certified erasure process was followed?
The Blancco certification received on each device confirms that the data has been rendered irrecoverable in accordance with recognised data sanitation standards. The certificate does not simply state the process used; it confirms the final disposition of the data. It certifies that all information previously stored on the device is completely unrecoverable, whether through secure erasure or physical destruction. This satisfies the requirement for outcome based evidence.
2. Beyond reliance on supplier certification, recognised standards, or confirmation that an erasure process was completed, does your organisation hold any recorded, device specific documentation evidencing independent verification, testing, or validation that the data on the particular storage media processed has been rendered irrecoverable in practice?
The erasure process generates device-specific certificates confirming completion of the data erasure process. We do not undertake any additional verification, testing, or validation.
Documents
This is National Highways' response to a freedom of information (FOI) or environmental information regulations (EIR) request.
You can browse our other responses or make a new FOI request.