Secure Document Destruction Resource Centre

Learn the importance of secure document destruction, why protecting your privacy and the environment matters.

Know secure document destruction

Protecting your privacy

Here are some information regarding frequently asked questions about secure document destruction.

  • What is NAID AAA Certification?

    A business with NAID AAA certification goes through highly detailed and ongoing vetting to ensure the highest of standards.


    This includes unannounced audits by highly trained independent security professionals.


    NAID AAA certification is an internationally recognised gold standard for secure data destruction.


    To be able to be certified as NAID AAA the endorsement criteria includes 


    • Collection of data
    • Transportation of data
    • Vehicle Security
    • Facility Security
    • Destruction
    • Personnel Security

    You can find more information on this at the Australian Government Security Construction and Equipment Commitee website


  • What does it mean by "Secure document destruction"?

    Secure document destruction refers to the disposal process of confidential or private information/data.


    If you have any doubts over the way in which your data may be used, it is responsible to take the steps to ensure the correct disposal.


    The best way to ensure your data is in safe hands is to have it destroyed and a certificate of completion provded by a NAID AAA certified company.

  • What happens with shredded paper?

    This largely depends on how you have your paper shredded. If it is shredded in a priavte facility and disposed of in recycling bins or waste - it likely ends up in landfill.


    Commercial shredding businesses will often shred, destroy and compress paper into massive bales for transport.  Once these bales are ready, they will often be sent to paper mills.  Once at a paer mill the bales are dismantled, washed, pulped, de-inked and turned into new products.  This means less waste and a cleaner environment - if you are looking to shred paper this is by far the best option.


    Some people will repurpose shredded paper as flooring in animal enclosures such as guinea pigs, rabbits or mice.

  • What is a certificate of destruction and why would I need one?

    The truth is not everyone does need one.


    But it is critical for peace of mind and risk management.  A CoD (Certificate of Destruction) can only be issued by a certified service provider. It is a legally binding certificate that ensures you know your data has been permanently and securely destroyed.


    A valid CoD will hold up in a regulatory audit or legal proceeding if you need to provide evidence that something has been destroyed.


    Valid CoD should include:

    • Vendor Details
    • Client Details
    • Asset Description
    • Method Used
    • Compliance Standard
    • Date and Time
    • Authorisation Signature
      •


Does all data need to be securely destroyed?

The short answer is no.


The detailed response to this question is depending on your legal obligations and understanding of risk for your data in question.


The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) require organisations covered by the Act to take all reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.


Once personal information is no longer needed and there is no legal requirement to retain it, organisations are generally expected to take all reasonable steps to securely destroy or de-identify it.


Before destroying any business records, ensure you've met all applicable retention requirements. Depending on the type of record, businesses may be required to retain documents for several years under taxation, employment, corporate, healthcare or other legislation.




Disclaimer: This page provides general information only and is not legal advice. Record retention and destruction requirements vary depending on your industry, the type of information held and applicable legislation. Businesses should seek professional legal or regulatory advice where appropriate.