Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.8.3

Sanitize or Destroy Media Before Disposal

Official citation: 3.8.3

Class: core · Severity: high

Statement of the obligation — verify against source

3.8.3

What it means

Sanitize or destroy media that holds CUI before you dispose of it or release it for reuse — covering digital media in workstations, network gear, printers, copiers, laptops, and mobile devices, plus non-digital media like paper and microfilm. Sanitization must remove the information so it cannot be retrieved or reconstructed.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.