Investing In A Data Protection Safe
Accredited European Certification Prevents Data Safe Supply Fraud And Ensures Quality.
If you consider that 70% of data safes and cabinets that are tested by accredited European testing labs fail on the first attempt, the implications of some manufacturers and safe suppliers displaying unaccredited "certification" badges that claim to comply with European standards is obvious.
All properly certified data safes and cabinets display an accredited certification plate that is clear and easy to understand. Certification plates should state the products' description, display the logo of an accredited certification body and indicate that the body is accredited to ISO/IEC 17065. This is a verifiable assurance that the unit in question has been tested and certified under the strictest criteria for the relevant standard. A reputable supplier will always provide accredited certification documents for a data or fire safe and the unit itself will have at least one certification plate which can be located on the inside of the door. This will always be a stamped metal plate, never a sticker. Accredited European certification is verifiable assurance that any data safe or fire safe, cabinet or strongroom has been tested and certified under European law. This is proof of standard for insurance, GDPR and litigation purposes.
What Accredited Certification Badges Look Like:
Accredited Certification Logos For Data
Below are the logos of three certification bodies with European accreditation to certify safes for fire resistance. The example images of certification plates below them are from ECB-S but any of the three logos below may appear.
• Please note the Swedish mark NT017 Fire which appears on many units on the market differs substantially from the European testing regime not only in method but in regulation. Of particular note is the absence of a drop test in the NT017 standard.
• Fire Protection For Paper EN15659
EN15659 is the “Light Fire Storage” certification standard (LFS). Units tested to this standard are designed to provide differing levels of protection against fire usually from 30 minutes (LFS30P) to 60 minutes (LFS60P). The certification plate for light fire storage will appear separately to a burglary resistance certification that may appear on the unit. Air humidity is not measure for this standard.
• Fire Protection For Data EN1047-1
EN1047-1 is the data standard for safes and cabinets. S60P and S120P are standards for the protection of paper documents both having an internal temperature limit of 170°C during testing. Units marked S60D and S120D have an internal temperature limit of 70°C and a humidity limit of 85% during testing. Units marked S60DIS and S120DIS have an internal temperature limit of 50°C and a humidity limit of 85% during testing. Certification plates for this standard will appear separately to any burglary resistance certification that may appear on the unit
Get The Right Advice
Data safes and fireproof cabinets are of increasing relevance particularly since the arrival of the General Data Protection Regulation which imposes heavy fines if data relevant to individuals isn't adequately protected. This means when deciding on a fire cabinet, fire safe or fire resistant strongroom to protect paper documents or data against fire, considerations such as certification, burglary protection and audited access control can be essential. Avoiding addressing these issues professionally can now be a very costly and embarrassing mistake. For home office use many of the same issues can apply.
As well as the highest levels of burglary protection, Certified Safes Ireland™ provide fire protection options of all sizes for paper and magnetic data to accredited certified European standards, that include a 9-meter drop test after furnace testing. These accredited European fire test standards far exceed the fire resistance requirements of Swedish NT017 standards which are common in many safes due to a less strict testing, application and surveillance regime that does not include drop testing, multiple size testing or market surveillance.
- Crucially, accredited European certification is proof of standard for insurance, GDPR and litigation purposes which can make all the difference in a worst-case scenario.
Identify What Type Of Data Needs To Be Protected
Paper, magnetic data, hard-drives, USB drives and laptops all have different degradation parameters in a fire. These degradation parameters need to be quantified and addressed by the chosen data safe, data cabinet or fireproof filing cabinet solution. This is an area where properly qualified expert advice is required.
Ensure The Risk Of Burglary Has Been Addressed
The risk of fire is the first thing most people think of when they look at protecting physical data but burglary is another major risk that needs to be countered that in reality, is statistically more likely than a fire. A burglary may not have data as its target but in many cases files, USB sticks and laptops will be removed. For sensitive files and files covered by the GDPR, make sure that the secure storage you choose is has properly accredited European certification for fire, burglary and has been properly anchored against removal.
A Word Of Caution
The secure storage business has for a long time been an extremely attractive opportunity for criminals and fraudsters. Even today there are well known suppliers of secure storage advertising in the media, on the internet or at exhibitions who have associated with criminals or served time in jail. Many continue to have no reservations in mislabelling products, making fraudulent security claims, selling “refurbished” safes that contain asbestos or counterfeiting and making certification claims that have no basis in reality. Needless to say, we recommend that before you engage a safe supplier that you do a quick check into the background, credentials, and experience of who you may be buying from, divulging information to, or letting into your home or business.
Thankfully, the internet has made it extremely easy to do a quick search using the name of your supplier and checking the background of the individual or business you are dealing with. Always remember when making your assessment, facts are what is important. Press articles or "experience" mean extraordinarily little. Look for verified qualifications and a knowledge of European standards, something an honest safe supplier should be able to demonstrate.
Never Buy An Uncertified Data Unit Second-Hand
Without a doubt the vast majority of second hand safes on the market today are not fit for purpose and many can even be highly dangerous. This is especially true for data safes, fire safes and fire cabinets as the use of asbestos was still widespread as a fire retardant less than 30 years ago. Many such units have been "refurbished" and found their way back into circulation from dealers and classified ads. If you are offered a safe, data safe of fire safe that has no certification badge or that is marked as having been manufactured before the year 2000 (Asbestos ban in Ireland) the person offering you the safe is breaking the law unless they have proof from the manufacturer that the unit in question does not contain asbestos.
Due to the huge numbers of second hand safes for sale in Ireland that contain asbestos, the Health And Safety Authority of Ireland (HSA) issued a Legislation & Enforcement notice entitled “Asbestos Risks In Safes And Fire-Resistant Cabinets” on the 21st of October 2019.
This Legislation & Enforcement notice covers all safes, fire cabinets or vaults manufactured before the year 2000.
The new HSA notice states:
- “The EU-wide ban on the marketing and sale of asbestos-containing products applies to second-hand or refurbished safes and cabinets that contain or are presumed to contain asbestos.”
- “Where the asbestos-free status of a pre-2000 safe or cabinet cannot be established or is uncertain, it must be presumed to contain asbestos.”
This of course includes hundreds of pre-2000 safes listed on the Association Of Insurance Surveyors UK (AIS) list that have been promoted as “appropriate for use in the United Kingdom and the Republic of Eire“. (AIS list 2015 - verbatim quote)
The easiest way to avoid the risk of dangerous asbestos exposure and defective equipment entirely is to ensure that the safe you are buying was manufactured after 2000, is from a reputable source and has been properly certified by an accredited certification body.
European Standards EN1047-1, EN1047-2 and EN15659
Protection class quality characteristic for fireproof protection
European Standards EN1047-1, EN1047-2 and EN15659
|Protection classes of products for the protection of data and systems|
|Light fireproof unit||LFS 30 P||EN 15659|
|LFS 60 P||EN 15659|
|Data cabinet||S 60 P||EN 1047-1|
|S 120 P||EN 1047-1|
|S 60 D||EN 1047-1|
|S 120 D||EN 1047-1|
|S 60 DIS||EN 1047-1|
|S 120 DIS||EN 1047-1|
|Diskette insert||DI 60 P/DIS||EN 1047-1|
|DI 120 P/DIS||EN 1047-1|
|Data container||C 60 D||EN 1047-2|
|Data room||R 60 D
|R 60 D
The abbreviations in the table stand for:
- Fireproof - Light fireproof storage unit to EN 15659
- S - Data cabinet to EN 1047-1
- DI - Diskette insert for installation into a data cabinet of protection class S 60 P and S 120 P
- C - Data container to EN 1047-2
- R - Data room to EN 1047-2
- 30 - Exposure to flames for 30 minutes
- 60 - Exposure to flames for 60 minutes
- 120 - Exposure to flames for 120 minutes
- P - Suited for heat sensitive paper documents with stress limits up to 170°C
- D - Suited for heat and humidity sensitive data media with stress limits up to 70°C and 85% air humidity
- DIS - Suited for heat and humidity sensitive data media with stress limits up to 50°C and 85% air humidity