Understanding IEEE 2883-2022

Navigating the future of data sanitisation: RedKey USB and the IEEE 2883 standard

In a significant move for data security, the Institute of Electrical and Electronics Engineers (IEEE) published the IEEE 2883-2022 standard, IEEE Standard for Sanitizing Storage, in August 2022. It gives detailed guidance for sanitising logical and physical storage, with particular attention to the storage technologies that have become common since NIST last published media-specific technique tables.

Updated October 2026: since this article was first written, NIST has replaced SP 800-88 Rev. 1 with NIST SP 800-88 Rev. 2, approved in September 2025. Rev. 2 focuses on running a sanitisation programme and points readers to IEEE 2883 for media-specific techniques, which makes IEEE 2883 more relevant than ever.

Understanding IEEE 2883-2022

IEEE 2883-2022 is a framework for sanitising storage across the main interfaces in use today, including SATA (ATA), SAS (SCSI) and NVMe drives, as well as removable flash media. It fills the gap left as NIST moved away from technique-by-technique tables. Key features include:

• Classification of sanitisation methods: it groups sanitisation into Clear, Purge and Destruct, matching the Clear, Purge and Destroy levels used by NIST. Clear protects against simple recovery through the normal interface; Purge makes recovery infeasible with state-of-the-art laboratory techniques while leaving the media reusable; Destruct leaves the media unable to store data.
• Interface-specific techniques: it maps techniques such as overwrite, block erase and cryptographic erase to the specific ATA, SCSI and NVMe commands that perform them.
• Attention to hidden areas: it addresses parts of a drive that ordinary writes cannot reach, such as hidden capacity on hard drives and the spare areas used by wear levelling on SSDs, and covers details such as NVMe namespaces.
• Verification guidance: it describes how results should be checked at each level, from representative sampling for Clear to full verification for Purge and physical inspection for Destruct.
• Clear language for compliance: it gives organisations consistent terms for describing and recording what sanitisation was carried out.

A companion document, IEEE 2883.1-2025, adds recommended practice on assessing risk and choosing methods for different use cases, such as internal reuse, external reuse and recycling.

Why it matters for SSDs

One of the most important messages in IEEE 2883 is that habits from the magnetic hard drive era do not carry over to flash storage. On an SSD, overwriting the visible capacity can leave old data in spare cells, so IEEE treats a simple overwrite as Clear only and recommends Purge techniques such as block erase or cryptographic erase for sensitive data. For hard drives, it notes that a single overwrite pass can be sufficient for some devices, which, together with NIST Rev. 2, retires the old idea that many passes are needed. Our article on whether overwriting SSDs is safe explores this further.

RedKey USB and IEEE 2883

RedKey USB is designed to make sound sanitisation practice simple to apply. It boots supported PCs and Intel Macs outside the installed operating system and erases the drives it detects, so technicians follow the same process on every machine. Details of the erasure process and the documentation for each release are on our technical information page.

Standards alignment is something we describe carefully. Neither IEEE nor NIST certifies erasure products, and labels in any tool that refer to a standard are the vendor's description rather than an independent finding. Organisations remain responsible for choosing a method that suits each drive and their risk, then recording the result. The Professional and Ultimate editions of RedKey USB produce a PDF report for each erasure to support that record; the Home edition shows the result on screen.

The practical takeaway

With data volumes growing and storage technology changing quickly, following current sanitisation guidance matters more than ever. For most organisations, IEEE 2883 now provides the technical detail, while NIST SP 800-88 Rev. 2 provides the programme around it: policy, method selection, verification, validation and certificates of sanitisation. For a wider view of how these fit together, see our guides to data destruction standards that matter and the NIST data sanitisation guide for IT teams.

What is the IEEE 2883-2022 standard for sanitizing storage?

IEEE Std 2883-2022, IEEE Standard for Sanitizing Storage, is a technical standard published in August 2022 that defines Clear, Purge and Destruct and maps sanitisation techniques to specific ATA, SCSI and NVMe commands. NIST SP 800-88 Rev. 2 now points to it for media-specific techniques.

Frequently asked questions

What methods does IEEE 2883 describe for logical and physical storage?

IEEE 2883 describes overwrite, block erase and cryptographic erase as logical techniques, and disintegration, incineration and melting as Destruct techniques for physical storage. It also covers degaussing for magnetic media, with conditions.

Does IEEE 2883 replace NIST SP 800-88?

No. They work together: NIST SP 800-88 Rev. 2 describes how to run a sanitisation programme, and refers to IEEE 2883 for the technical detail of how to sanitise each type of media.

Does IEEE certify erasure products?

No. IEEE publishes the standard but does not certify products against it. Treat any claim of "IEEE compliance" as the vendor's description and check what method is actually applied.

Our FAQ covers the sanitisation methods and drive types RedKey USB supports. Related reading: Data Destruction Standards That Matter and NIST Data Sanitisation Guide for IT Teams.