DoD 5220.22-M ECE — Enhanced Character Erase

ECE is commonly expanded as Enhanced Character Erase in commercial data-wiping terminology.

It refers to an extended multi-pass overwrite profile derived from the historical DoD 5220.22-M wiping concept.

Historical DoD sanitization guidance referenced overwriting addressable locations with:

• A Character Or Pattern
• Its Complement
• A Random Character Or Pattern
• Verification

NIST historical material documents this approach for writable magnetic media.

Commercial software subsequently introduced different extended profiles under names such as DoD 5220.22-M ECE and DoD 7-pass wipe.

Therefore, the exact ECE pass sequence should always be identified by the actual software implementation rather than presented as a current official DoD requirement.

DSP includes a dedicated DoD 5220.22-M ECE method within the DSP Sanitization Engine.

1. 01Select Method
2. 02Select Device
3. 03DSP Sanitization Engine
4. 04Execute ECE Method
5. 05Monitor Passes
6. 06Verify Result
7. 07Audit-Ready Certificate

DSP records the actual sanitization operation performed rather than simply marking a device as deleted or formatted.

The purpose of a multi-pass wiping process is to repeatedly replace data across the applicable addressable storage area.

Depending on the configured implementation, the process can use combinations of:

• Defined Patterns
• Complementary Patterns
• Random Data
• Multiple Overwrite Passes
• Final Verification

DSP can display operational information such as:

• Current Pass
• Overall Progress
• Processing Rate
• Elapsed Time
• Estimated Completion
• Device Status
• Errors
• Verification Status

Important: “DoD 7-pass wipe” is widely used as a commercial search term, but it should not automatically be interpreted as a current official seven-pass DoD requirement.

The historical multi-pass overwrite approach is primarily associated with magnetic hard disk drives.

DSP supports supported HDD technologies including:

• SATA HDD
• SAS HDD
• Pata/ide HDD
• External HDD
• USB-Connected HDD

Device information can include:

• Manufacturer
• Model
• Serial Number
• Capacity
• Firmware
• Device Status
• Sanitization Progress
• Verification Result
• Errors And Exceptions

Modern SSD and NVMe devices use storage architectures that differ substantially from traditional magnetic HDDs.

These may include:

• Flash Translation Layers
• Wear Leveling
• Garbage Collection
• Spare Cells
• Over-Provisioning
• Controller-Managed NAND

Consequently, a traditional multi-pass overwrite should not automatically be considered equivalent to a modern purge technique for SSD or NVMe media.

NIST SP 800-88 Rev. 2 specifically notes that traditional multiple-overwrite practices may be inappropriate for certain media such as SSDs with over-provisioning.

For modern solid-state storage organizations should select an appropriate technology-specific sanitization method based on device capabilities and required assurance.

The important distinction is that ECE should be documented according to the actual implementation and configuration used by the sanitization software.

DoD 5220.22-M ECE is a historical wiping methodology, while modern standards and frameworks address sanitization according to current storage technologies and organizational requirements.

NIST published Rev. 2 in September 2025 and it supersedes Rev. 1. The current guidance focuses on establishing a media-sanitization program and selecting appropriate techniques and controls based on information sensitivity.

IEEE 2883

IEEE 2883 provides modern storage-sanitization guidance covering logical and physical storage and technology-specific sanitization.

DoD 5220.22-M ECE

ECE remains relevant where an organization specifically maintains a historical or contractual requirement for the methodology.

DSP supports these different methodologies separately rather than treating one wiping algorithm as appropriate for every storage technology.

DSP can record sanitization and device-condition information including:

• Verification Status
• Read/write Errors
• Logical Bad Sectors
• Physical Bad Sectors
• Device Health
• Temperature
• Power-On Hours
• Firmware
• Model
• Serial Number
• Completion Status

This provides additional context when evaluating whether a device completed the selected sanitization operation successfully.

DSP generates an audit-ready sanitization certificate for the DoD 5220.22-M ECE method implemented in the software.

The certificate can include:

DoD ECE may still appear in legacy customer specifications, ITAD procedures and procurement requirements.

DSP can integrate the method into a controlled workflow:

1. 01Receive
2. 02Identify
3. 03Sanitize
4. 04Verify
5. 05Certify
6. 06Reuse / Dispose

Suitable applications include:

• IT Asset Disposition
• Hard Drive Refurbishment
• Enterprise IT Retirement
• Data Center Decommissioning
• Secure Device Resale
• Government Asset Processing
• Corporate Equipment Recycling

DSP also supports offline sanitization workflows for environments where Internet connectivity is restricted.

DoD 5220.22-M should not be marketed as a current DoD data-sanitization standard.

The current NISPOM framework is 32 CFR Part 117, which replaced the NISPOM previously issued as DoD policy under DoD 5220.22-M. DCSA states that the 32 CFR Part 117 rule became effective February 24, 2021 and DCSA records the cancellation of DoD 5220.22-M on December 10, 2021.

For current media sanitization programs organizations should evaluate applicable modern guidance such as NIST SP 800-88 Rev. 2 and technology-specific standards such as IEEE 2883.

Dedicated Method Dedicated DoD 5220.22-M ECE implementation within the DSP Sanitization Engine.

Multi-Pass Execution Execute the configured ECE sanitization process.

Live Monitoring Track passes, progress, rate, time and status.

Verification Record verification results and relevant errors.

Device Intelligence Capture device identification and storage-health information.

Audit-Ready Certification Generate a certificate documenting the operation performed.

Offline Operation Suitable for controlled and restricted environments.

Multiple Storage Technologies Support for HDD, SSD, NVMe and other supported storage devices, with method selection based on storage architecture.