-- since you do not have a protocol established for disk 'elimination' find a company in the same business as yours and determine what they deem is appropriate. For example, we are bound under US federal law: Oxley-Sarbanes - so called SOX. We use a company that literally shreds disks. It may be overkill, but apparently our auditors don't think so.