Protecting scratched DFSMShsm-owned data sets

Some data sets are so sensitive that you must ensure that DASD data, left on a volume after the data set has been scratched from the VTOC, cannot be accessed after the data set is scratched. You can implement this protection when you:

Specify the SETSYS ERASEONSCRATCH command and
Specify the ERASE attribute in the RACF® profiles for sensitive data sets

If you specify both of the preceding commands, DFSMShsm writes zeros over the sensitive data that is left on the volume after the data set has been scratched from the catalog.

For more information about protecting sensitive data by using the ERASEONSCRATCH technique, refer to z/OS DFSMShsm Storage Administration.