New DIN 66399 Shredder Security Levels

HOUSTON - May 16, 2013 - PRLog -- Top-Level security in shredding all types of different data carriers

The new DIN 65399 replaces DIN 32757 and for the first time divides data destruction into three protection classes, six material classifications and seven security levels.

3 Protection Classes

To determine the security requirement, check which kind of data needs destroying. This gives you a classification in one of the three protection classes.

6 Material Classifications

For the first time, DIN 66399 defines different material classifications that indicate the type of data carrier you are destroying.

7 Security Levels

Instead of the previous 5, the new DIN 66399 now defines 7 security levels for each material classification. As hitherto, the higher the security level, the smaller the particle size the data carriers will be shredded into.

The protection classes in detail

The protection classes define the protection requirement for data and classification into the appropriate security level.

Protection class 1:

Normal security requirement for internal data intended for and accessible to

fairly large groups. Unauthorized disclosure would have a limited negative impact

on the company. Protection of personal data must be ensured. There would otherwise be a risk to the position and financial situation of the person affected.

Protection class 2:

High security requirement for confidential data restricted to a small group of persons. Unauthorized dissemination would have a considerable effect an the company and could violate contractual legal obligations or legislation. The protection of personal data must meet strict requirements. There would otherwise be a considerable risk to the social standing and financial situation of the individual affected.

Protection class 3:

Very high protection requirement for particularly confidential and secret data restricted to .a very small and named group of persons with access authorization. Unauthorized dissemination would have serious consequences for the company (threatening its livelihood) and may violate professional secrecy, contracts or legislation. The protection of personal data must be ensured at all cost. Otherwise the life and limb or personal freedom of the individual. affected may beat risk.

(http://blog.machine-solution.com/2013/05/13/new-din-66399...)

In addition to paper, DIN 66399 covers 5 other data carriers that are classified accordingly. Here’s a summary of them all:

P- Information shown in original size, e.g. paper, films, printed forms.

F – Information shown in reduced form, e.g. microfilms, transparencies.

0- Information on optical data carriers, e.g. CDs/ DVDs.

T – Information on magnetic data carriers, e.g. ID cards, floppy disks.

H -Information on hard drives with magnetic data carriers.

E -Information on electronic data carriers, e.g. USB sticks, chip cards.

The security levels for information shown in original size

The seven security levels in the new DIN 66399 provide effective protection in destroying all kinds of data carriers. As paper-based data carriers are still the ones most frequently destroyed, please find below the seven security levels for the “Information shown in original size” classification, e.g. paper.