Secure Data Erasure
Certified erasure before reuse or disposal.
Guide · Data security
How to safely dispose of old business laptops and PCs
Old laptops, PCs and drives often still hold customer records, emails and passwords. Here's how to make sure that data really is gone before a device is reused, sold or recycled.
Why deleting files isn't enough
Deleting a file, emptying the recycle bin or even formatting a drive usually just removes the pointers to the data. The data itself can often be recovered with freely available tools. A factory reset is better, but on its own it doesn't give you any proof that the data has gone.
Solid-state drives (SSDs), now in most laptops, add another complication: the way they store data means traditional "overwrite" methods may miss parts of the drive. They need an erasure method designed for SSDs.
What are your responsibilities?
Under UK GDPR, businesses must keep personal data secure, and that includes when equipment is disposed of. If an old laptop with customer or staff information ends up in the wrong hands, the business is responsible. Being able to show how each device was wiped, and when, is part of demonstrating you took appropriate care.
A step-by-step process
- Make a list. Record each device being retired with its make, model and serial number.
- Back up anything needed. Check nothing important exists only on that device.
- Remove it from your accounts. Sign out of Microsoft 365, remove it from device management and "find my device" services, and revoke any saved access.
- Securely erase the storage using a recognised method suited to the drive type (hard drive or SSD).
- Get a certificate for each device, linked to its serial number, as your record that the data was destroyed.
- Destroy drives that can't be erased. Failed or damaged drives should be physically destroyed.
- Reuse, sell or recycle responsibly. Once certified, devices can be reused or sold; otherwise use a recycler that handles electrical waste (WEEE) properly.
Don't forget the less obvious devices
- Desktop PCs and old servers
- External hard drives and USB sticks
- Network storage (NAS) boxes
- Printers and copiers with internal storage
- Old phones and tablets used for work email
GWB Tec provides certified secure data erasure for business computers and storage devices. See secure data erasure.
Frequently asked
Quick answers
Is a factory reset enough before selling a business laptop?
A factory reset is better than deleting files, but it doesn't give you proof the data is gone and may not remove everything. Certified secure erasure is the safer option for business devices.
Do I need a data erasure certificate?
It's strongly recommended. A certificate linked to each device's serial number is your evidence that personal and business data was securely destroyed.
How do you erase an SSD securely?
SSDs need an erasure method designed for solid-state storage, rather than simple overwriting. Drives that have failed or can't be erased should be physically destroyed.
What about old printers and phones?
Many copiers and printers store copies of scanned and printed documents, and phones hold email and passwords. They need wiping too.
Retiring old equipment?
We'll securely erase it, certify it and help you reuse, sell or recycle it responsibly.
Talk to GWB Tec