If sensitive data are stored on a CD-ROM and are no longer needed, which would be the proper way of disposing of the data?