IT Equipment Disposal Across the UK

No. Computers, laptops, monitors, phones and other electronics are waste electrical and electronic equipment under the WEEE Regulations 2013, and businesses must not put them in general waste. They must be passed to a registered carrier and treated at a permitted facility, and some items, such as batteries and older CRT monitors, are hazardous waste with extra paperwork.

UK GDPR requires personal data to be kept secure until it is destroyed, including on equipment you are getting rid of. If an old laptop or server is sold or dumped with data still on it, that can be a reportable data breach. You should be able to show that every device was wiped or destroyed, which is why itemised data destruction certificates matter.

No. Deleting files or a quick format usually leaves the data recoverable with free tools. Drives should be overwritten with certified erasure software, or securely erased using the drive's own sanitise commands for SSDs, then verified. Where that is not possible, the drive should be physically destroyed.

Both are valid. Certified wiping lets the drive or device be reused, which reduces cost and waste, and is suitable for most business data. Shredding is better for faulty drives, drives that cannot be verified as wiped, and very sensitive data. Many organisations wipe most devices and shred a smaller number of high-risk drives.

SSDs store data differently, so traditional overwriting and degaussing are not reliable on their own. They should be cleared using the drive's built-in secure erase or sanitise functions, or cryptographic erase for encrypted drives, with verification. If that cannot be confirmed, SSDs should be shredded to a small particle size.

Common reference points in the UK include NIST SP 800-88 for media sanitisation, NCSC guidance on secure sanitisation, ADISA certification for IT asset disposal providers and DIN 66399 for shred particle sizes. Ask any provider which standard they work to and what certificates you will receive.

Yes. You receive an itemised report listing each device by make, model and serial number, showing whether it was erased or destroyed, along with the date and method. This is your evidence for auditors, insurers and the ICO if questions are ever asked.

Sometimes. Larger collections of recent, working laptops, desktops and servers can have enough resale value to cover the cost, or even give you a rebate. Older or mixed equipment, small collections, on-site shredding and items such as CRT monitors and printers usually carry a charge.