Skip to content 
Schutzklasse (DIN 66399)
In brief
The protection class under DIN 66399 describes how much protection the data on a data carrier requires and thus determines which security levels are eligible for destruction. The standard has three protection classes: normal, high, and very high protection requirement. In IT decommissioning, the company determines the protection class – it is the first step toward the appropriate destruction.
The three protection classes
| Protection class | Need for protection | Permitted security levels |
|---|---|---|
| 1 | Normal – a leak would have limited consequences | 1 to 3 |
| 2 | High – considerable consequences, including legal ones, e.g. for personal data | 3 to 5 |
| 3 | Very high – consequences that threaten the existence of the organization or danger to life and limb | 4 to 7 |
The protection class results from a Protection requirement assessment. Together with the Material class of the data carrier, this yields the specific security level, for example H-5 for hard drives. Since personal data is stored on almost every company computer, most companies end up at protection class 2 at a minimum.
Do not confuse
Der Begriff „Schutzklasse“ wird auch in der Elektrotechnik verwendet. Dort beschreibt er den Schutz gegen elektrischen Schlag, etwa Schutzklasse I bis III bei Elektrogeräten. Mit der Datenträgervernichtung hat das nichts zu tun. Die vollständige Tabelle aus Schutzklassen, Materialklassen und Sicherheitsstufen finden Sie im Ratgeber DIN 66399: Which safety level your hard drives need. Second IT destroys in-house in accordance with DIN 66399, certified for security level H-5 – this level also covers protection class 3.
Frequently asked questions about the protection class
Who determines the protection class?
The company that owns the data. The service provider implements the desired security level; the assessment of the protection requirement remains with the client.
Which protection class applies to personal data?
Generally protection class 2. For particularly sensitive data, such as health data or data subject to a duty of confidentiality, protection class 3 may be appropriate.
What is the difference between protection class and security level?
The protection class describes how sensitive the data is. The security level describes how finely the data carrier is shredded. The protection class determines which security levels are permitted.
Which security levels belong to which protection class?
Protection class 1 permits security levels 1 to 3, protection class 2 levels 3 to 5, and protection class 3 levels 4 to 7. The specific level follows together with the material class, for example H-5 for hard drives.
Is the protection class for electrical devices the same as in DIN 66399?
No. In electrical engineering, protection class I to III describes protection against electric shock for electrical devices. This has nothing to do with the protection requirement of data and data carrier destruction under DIN 66399.
Data carrier destruction in accordance with DIN 66399 – certified for H-5.
Send us your device list. You will receive your offer in 48 hours on average.