We have a process, that we hope, secures any PII or PHI that may be contained on rental / owned multi-purpose machines (fax/scan/print). All vendors are notified, and all machines have a notice posted, that anytime a multipurpose machine needs replacement, return, or is 'fixed' by replacing the hard drive, all disks are sent to our IT department. We obtain the disk on all machines that are out dated, rented (we purchase these), fixed by virtue of hard drive replacement, or for some other reason disks are being replaced. We follow the guideline for media sanitization NIST Draft Special Publication Number 800-88. Wiping is a well used nomenclature with varying meanings. I would suggest that you check with your IT department for their definition.