How hard drive shredding works
An industrial hard drive shredder is not a paper shredder scaled up. It uses hardened cutting blades or rotary hammers to tear apart the drive casing, platters, circuit boards, and any flash memory chips into small, irregular fragments. The fragments are typically collected in a secure container, audited by weight or count, and then separated by material type for recycling as raw metals and plastics.
The security assurance of shredding is determined by the particle size: the smaller the fragments, the harder data recovery becomes. Industrial ITAD shredders typically produce fragments of between 6 mm and 20 mm, depending on the machine and the settings used. Security-critical applications may require smaller particle sizes — HMG IA Policy No.5, which governs the destruction of UK government-classified information, specifies maximum particle dimensions by classification level.
Once shredded, no data recovery technique — including laboratory-level forensic analysis — can reconstruct the original data.
Which devices can be shredded?
Physical shredding works on all types of storage media, including:
- Traditional magnetic hard drives (HDDs)
- Solid-state drives (SSDs)
- USB flash drives
- Backup tapes
- Optical media (CDs, DVDs, Blu-ray discs)
- Smartphones and tablets (where the storage chip is integral to the device)
- Memory cards and microSD cards
This universality is one of shredding’s key advantages. Where software wiping may not be suitable — for example, on certain SSDs with non-standard firmware, or drives with bad sectors — shredding provides reliable destruction regardless of the device’s internal architecture.
For SSDs in particular, degaussing is not effective because SSDs store data using flash memory, not magnetic fields. Shredding is the recommended alternative when certified software wiping cannot be confirmed. See our guide to how to destroy an SSD for more detail.
When is shredding the right choice?
Shredding is the appropriate method in several situations:
- Highest sensitivity data: Where drives have held personally sensitive data (health records, legal files, financial data classified under sector regulation), the absolute certainty of physical destruction may be required or preferred.
- Drives with faults: A drive with bad sectors or firmware issues may not respond correctly to software wiping tools. Verification failures mean the wipe cannot be confirmed — shredding removes the uncertainty.
- No residual value: Drives that are too old, too small, or too damaged to be refurbished have no economic reason to be preserved. Shredding is appropriate when there is nothing to gain from wiping.
- Government and regulated sectors: Public sector organisations and businesses handling data classified under HMG IA Policy No.5, or subject to sector-specific regulation, may be required to use physical destruction for certain asset types.
- SSD disposal without certified wiping tools: If you cannot confirm that your wiping software fully supports the specific SSD model and firmware, shredding is the safer option.
When is shredding not the right choice?
Shredding destroys the device entirely, so it is not appropriate if the drive is to be reused, refurbished, or donated. A drive in good working condition that holds personal data can be certified-wiped and returned to service. Shredding a working drive removes that option.
For devices that will be reused, certified software wiping to NIST SP 800-88 standard is the preferred route. See our guide to how to wipe a hard drive for step-by-step guidance.
On-site vs off-site shredding
Hard drive shredding can be carried out on your premises (on-site) or at a secure facility operated by an ITAD provider (off-site).
On-site shredding uses a mobile shredder brought to your location. You witness the destruction directly, which provides immediate assurance and eliminates the chain-of-custody risk of transporting unshredded drives. It is the preferred option for organisations with very high sensitivity requirements or large volumes.
Off-site shredding involves drives being collected in locked, tamper-evident containers and transported to a secure facility for shredding. A documented chain of custody records the transfer. Off-site shredding is more practical for smaller volumes and lower-sensitivity situations, and it allows the ITAD provider to use high-capacity industrial equipment rather than a mobile unit.
Both options should result in a certificate of data destruction and a WEEE-compliant recycling route for the shredded material.
What happens to shredded material?
Shredded hard drives are not simply discarded. The fragments — a mixture of aluminium, steel, copper, circuit board material, and glass platters — are sorted by material type and sent to specialist recycling facilities. Metals are smelted and reused as raw materials. This process complies with the WEEE Regulations 2013, which require electronic waste to be processed through an authorised treatment facility rather than sent to landfill.
Documentation and compliance
Shredding must be evidenced. For every collection, your ITAD provider should issue a certificate of data destruction that records:
- The serial numbers and asset identifiers of every drive shredded
- The destruction method (physical shredding) and the particle size achieved
- The date of destruction
- The name and contact details of the provider
- A statement confirming WEEE-compliant disposal of residual material
This certificate is your evidence of compliance with UK GDPR’s accountability principle. Keep it alongside your IT asset register.
Recycle4Charity provides certified hard drive shredding for London businesses, with a certificate of data destruction issued for every collection. Visit our hard drive and media destruction page to learn more, or contact us to arrange a collection.