Exchange/Sale Program Disposition of Sensitive Automated Information
	Disposal of surplus Information Technology (IT) equipment without taking appropriate measures to erase the information stored on the system's media can lead to the disclosure of sensitive information, embarrassment to the agency, costly investigations, and other consequences. Sharing of media within the government or between government and contractors also presents security issues. Federal agencies must establish policies and procedures to ensure the proper disposition of sensitive automated information. Sanitization of magnetic media means the removal of data from storage media so that, for all practical purposes, the data cannot be retrieved. The three techniques are commonly used for media sanitization, overwriting, degaussing, and destruction. Applicable Laws The Privacy Act of 1974 The Computer Security Act of 1987 The Computer Matching and Privacy Protection Act of 1988 The Electronic Communications Privacy Act The Gramm-Leach-Bliley Act The Health Insurance Portability & Accountability Act (HIPAA)