NIST states that seven passes is sufficient to prevent recovery of residual data.

Note that while it is rare, I have seen cases where even this has not been enough.

--TH13