At our company I instituted a policy that hard drives no longer in service should be either DoD wiped or physically destroyed (via disassembly and then chopping up the platters). In addition, we try to ensure that if hard drives go back to vendors for warranty exchanges, that the vendors have a well-defined hard drive privacy and destruction policy stated on their website.