Skip to main content
Category: Data Lifecycle and Disposal

Degaussing

Also known as: Demagnetizing, Deperming
Simply put

Degaussing is a method of erasing data by exposing magnetic storage media, such as hard disk drives or magnetic tapes, to a strong reverse magnetic field. This randomizes the magnetic patterns that hold the stored information, reducing the residual magnetism toward zero so the original data can no longer be recovered. It is one recognized approach to sanitizing magnetic media before disposal or reuse.

Formal definition

Degaussing is the process of reducing the magnetic flux of a storage medium to virtual zero by applying a reverse magnetizing field, thereby randomizing the magnetic domains that encode stored data (NIST CSRC). Applied to magnetic media, it renders the previously recorded information unreadable and is generally treated as a media sanitization technique. Its effectiveness is confined to magnetic media; it does not sanitize solid-state or optical media, which do not rely on magnetic storage. This entry defines the concept and mechanism only; it does not specify particular field-strength requirements, verification methods, applicable sanitization levels, retention or disposal policy obligations, or the conditions under which degaussing is required or sufficient under any specific data protection regime, all of which depend on jurisdiction, media type, and organizational policy.

Why it matters

Degaussing addresses a specific and persistent risk in media disposal: data that remains recoverable on storage media after it is retired, reassigned, or sent for destruction. Magnetic media such as hard disk drives and tapes retain readable information until the underlying magnetic patterns are deliberately overwritten or destroyed, and simply deleting files or reformatting a drive does not remove the residual data. By reducing the magnetic flux of the medium toward zero, degaussing offers one recognized way to render previously recorded information unreadable before the media leaves organizational control.

For organizations subject to data protection obligations, the disposal stage of the data lifecycle is a point where personal or sensitive information can be exposed if handled improperly. Media sanitization is therefore relevant to demonstrating that data no longer needed has been dealt with appropriately, though whether degaussing is required or sufficient depends on jurisdiction, media type, and organizational policy rather than on the technique itself. Accountability under governance frameworks generally requires demonstrable evidence that sanitization occurred, so the choice and documentation of a sanitization method matter as much as the method's mechanics.

Who it's relevant to

Information security and IT asset disposal teams
Teams responsible for retiring, reassigning, or destroying storage media need to understand which sanitization methods apply to which media types. Degaussing is relevant to magnetic media specifically and does not address solid-state or optical media, so it typically forms one part of a broader media sanitization approach rather than a universal solution.
Data protection and information governance leads
Those overseeing the disposal stage of the data lifecycle should treat degaussing as one recognized sanitization technique whose suitability depends on media type, jurisdiction, and organizational policy. Whether it is required or sufficient in a given context is a policy and legal question that falls outside the scope of the technique itself, and accountability generally requires demonstrable evidence that sanitization was carried out.
Compliance and audit functions
Reviewers assessing media disposal controls need to confirm that the sanitization method chosen matches the media involved and that its use is documented. Degaussing applies only to magnetic media, and this entry does not cover verification methods, sanitization levels, or retention obligations, all of which may need to be evidenced separately.

Inside Degaussing

Magnetic Media Sanitization
Degaussing is a media sanitization technique that exposes magnetic storage media to a strong magnetic field to disrupt the stored magnetic domains, rendering the previously recorded data unreadable. It applies to magnetic media such as traditional hard disk drives, magnetic tape, and floppy disks.
Coercivity and Field Strength
Effective degaussing depends on applying a magnetic field of sufficient strength relative to the coercivity of the target media. Media with higher coercivity requires a correspondingly stronger degausser, so the device must be matched to the media type to achieve sanitization.
Scope Limitation to Magnetic Media
Degaussing generally does not sanitize solid-state drives (SSDs), flash memory, or other non-magnetic storage, because these technologies do not store data using magnetic domains. Sanitization of such media typically requires other methods such as cryptographic erase or physical destruction.
Typical Outcome for the Device
Degaussing a hard disk drive commonly renders the drive itself permanently inoperable, because it can destroy the servo tracks and low-level formatting written at manufacture, not only the user data. The media is generally not reusable afterward.
Relationship to Governance and Security
Degaussing sits within information security as a confidentiality control for media at end of life, and it supports data governance obligations around retention and disposal. Its use should be evidenced through documented procedures and verification records to support demonstrable accountability.

Common questions

Answers to the questions practitioners most commonly ask about Degaussing.

Does degaussing work on solid-state drives (SSDs)?
No. Degaussing relies on disrupting the magnetic domains that store data on magnetic media such as traditional hard disk drives and magnetic tape. SSDs store data in NAND flash memory, which is not magnetic, so a degausser generally has no sanitizing effect on them. Attempting to degauss an SSD typically leaves the data intact and recoverable. Different sanitization methods, such as cryptographic erasure or media-specific secure erase commands, are generally required for flash-based media. This entry does not cover the full range of SSD sanitization techniques.
Is a degaussed drive still usable, and does degaussing simply delete the files?
Degaussing is not equivalent to deleting files. It does not selectively remove data; it disrupts the magnetic field across the entire medium. On modern hard drives, this typically also destroys the servo and timing information the drive needs to operate, so a degaussed drive is generally rendered permanently inoperable rather than reusable. Because the process affects the whole medium at once, it cannot be targeted at individual files or partitions. This entry does not address which specific drive models retain any residual function after degaussing.
How should degaussing fit into a media sanitization procedure?
Degaussing is typically used as one method within a broader media sanitization policy that specifies which technique applies to which media type and data sensitivity. Organizations generally match the method to the medium, using degaussing for magnetic media while selecting other approaches for flash-based or optical media. Procedures commonly document the decision to degauss, verify the outcome where feasible, and record the action as part of accountability evidence. This entry does not prescribe a specific standard or policy template.
How can you verify that degaussing was effective?
Verification is generally challenging because a properly degaussed magnetic drive is often left inoperable, which prevents reading it back to confirm data removal. Organizations typically rely on using a degausser rated for the specific coercivity of the media, following the manufacturer's operating procedures, and maintaining records of the process. Some programs pair degaussing with physical destruction to provide additional assurance. This entry does not specify particular test equipment or verification standards.
What records should be kept when degaussing media?
Accountability under most governance frameworks requires demonstrable evidence rather than stated intent, so organizations generally retain records identifying the media sanitized, the date, the method and equipment used, the operator, and any subsequent disposition such as physical destruction. Such records support audit and, where applicable, help demonstrate that data was disposed of in line with retention and disposal obligations. This entry does not cover specific retention periods or the retention rules that trigger disposal.
When might degaussing be combined with physical destruction?
Degaussing and physical destruction are sometimes combined when an organization wants additional assurance for higher-sensitivity data or when verification of degaussing alone is difficult. Because a degaussed drive is generally already inoperable, physical destruction adds a further barrier against recovery. The choice typically depends on data sensitivity, applicable policy, and risk tolerance. This entry does not address the security-control selection criteria in any specific standard, nor does it cover chain-of-custody requirements for third-party destruction vendors.

Common misconceptions

Degaussing works on any type of storage media, including solid-state drives.
Degaussing generally only affects magnetic media. Solid-state drives, USB flash storage, and other flash-based media do not rely on magnetic domains, so degaussing typically will not sanitize them and other methods are required.
A degaussed drive can simply be wiped and reused.
Degaussing a hard disk drive commonly destroys manufacturer-written servo and control information, which generally renders the drive permanently inoperable rather than reusable.
Successful degaussing removes the data from the scope of data protection obligations.
Sanitizing media addresses disposal of a specific copy, but it does not by itself change how the organization must treat other copies or govern the underlying processing. Removing data from a device is a disposal control and should not be equated with rendering all related information non-personal.

Best practices

Confirm that the target media is magnetic before selecting degaussing, and use an alternative sanitization method such as cryptographic erase or physical destruction for solid-state and flash media.
Match the degausser's field strength to the coercivity of the specific media type, verifying the device is rated for the drives being sanitized.
Document the sanitization procedure and retain verification records to provide demonstrable evidence of disposal in support of governance accountability.
Treat degaussing as generally rendering the drive inoperable, and plan for disposal or destruction of the media rather than reuse.
Integrate degaussing into a documented end-of-life media handling and retention policy so disposal is consistent and auditable.
Where residual assurance is required, consider combining degaussing with subsequent physical destruction for higher-sensitivity media, recognizing that no single control guarantees compliance across all contexts.