Chain of Custody (CoC) is the paper or digital trail from the first enquiry to the control, transfer and last stage of downloading a Certificate of Destruction. When it comes to shredding of documents, media, products or packaging it is important for the data controller to map where data is being passed and to ensure security measures are in palce to protect the data. Read on to find out more.
A secure 'chain of custody' requires that from the moment sensitive information (such as documents, paperwork or media devices) is collected from a data controller (by a data processor like Topwood), the transfer and custody is recorded so that it can be proved no third party has accessed that data.
The importance of a secure Chain of Custody is increasing due to the upcoming changes in the new Data Protection Act being implementing in 2018. It is essential that data controllers know exactly where their data is passing through in order to comply with the regulations and an individual's 'right to be forgotten'.
It is best practice to keep the number of stages in the destruction chain procedure as short as possible. At Topwood, the shredding process is kept to a minimal in order to eliminate the risk of a data breach. We recommend on-site shredding for both document and media as this takes out the hassle of auditing the off-site shredding facilities. See the difference between on-site and off-site shredding here
Watch our video below to see our Chain of Custody process.