If I purchase used storage media from a company, what is my liability for the data that it may contain?
As a standard practice, all such media would be wiped. However, secure data destruction is not my business.
From an ethical standpoint, I would want make a "best effort" to ensure that all data is removed. However, from a legal perspective, where does the liability reside in the event of data being leaked?
Is there a "standard" disclaimer of liability for situations such as this that I can use, or is this a case "there be dragons, contact a lawyer"?