Ensuring Data Erasure on Printer Cartridges and Drums
Print three full pages of random text to ensure no data remains on printer cartridges or drums.
Plain language
Believe it or not, printers can store data in their cartridges and drums. This means if you don't clear them out before disposing or reusing, you risk leaking sensitive information. By printing a few full pages of random text, you effectively clear any data out and protect your business from leaking confidential info when the cartridge or drum moves on.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Aug 2018
Control Stack last updated
19 Mar 2026
E8 maturity levels
N/A
Official control statement
At least three pages of random text with no blank areas are printed on each colour printer cartridge or MFD print drum.
Why it matters
If cartridges or drums aren’t overwritten with random pages, residual print data may be recovered during disposal or reuse, causing sensitive information disclosure.
Operational notes
For each colour cartridge or MFD drum, print at least three full pages of random text with no blank areas, and record completion at replacement/maintenance.
Implementation tips
- The office manager should ensure that all staff understand the importance of this practice. They can do this by scheduling a brief training session to explain the procedure and why it's critical for data security.
- IT staff should take responsibility for the actual printing task to clear cartridges or drums. They should generate random text using a simple tool like a random text generator, print at least three pages, and ensure the text covers each page fully to avoid any remaining data traces.
- Procurement staff should be instructed to log each disposal of cartridges and drums, confirming they have been cleared correctly. They can do this by maintaining a checklist to sign off each time the procedure is performed before disposal or return.
- The manager should establish a clear process for handling cartridges and drums after they've been used. This includes designating a safe area for holding them until they are cleared and developing a timeline for when clearing should occur.
- IT staff should regularly audit the random text generation and printing process to ensure it's followed consistently. They can do this by setting reminders in their calendar and checking that each step is performed correctly, especially before the cartridges or drums leave the premises.
Audit / evidence tips
- AskLogs or records showing the date and time when cartridges or drums are cleared GoodRecord will show each instance clearly annotated with the date and type of equipment processed
- GoodDemonstration will show full coverage of the page to prevent data retention
- AskStaff members about the importance and steps taken for clearing cartridges. Listen for their understanding of the risks and procedures involved GoodWill include specific actions taken and the rationale behind them
- GoodInvolves safe storage, timely clearance, and adherence to documented procedures
Cross-framework mappings
How ISM-0317 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
| layers Partially meets (2) expand_less | ||
| Annex A 7.10 | ISM-0317 requires a specific sanitisation action for printer cartridges and MFD drums by printing three full pages of random text to elim... | |
| Annex A 7.14 | ISM-0317 requires printing at least three full pages of random text (with no blank areas) on each colour printer cartridge or MFD print d... | |
| link Related (1) expand_less | ||
| Annex A 8.10 | Annex A 8.10 requires deletion of information from devices and storage media when it is no longer required | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.