Skip to content

United Kingdom · topical cluster

UK ITAD files — certificates, GDPR, chain of custody

One topic: retiring UK organisational IT with proof. These pages are written for this edition. They are not a language swap of the European hub.

  1. 01

    Do you need a certificate of data destruction in the UK?

    A certificate of data destruction is written proof that named drives, tapes or laptops were sanitised or destroyed. If that kit held personal data, UK GDPR Article 5(2) requires you to demonstrate what happened to it. RecyclicTech issues the certificate per serial. A recycling ticket, a skip receipt or a WEEE transfer note is a different document — it proves metal moved, not that the data is gone.

  2. 02

    IT asset disposal GDPR checklist for UK organisations

    UK GDPR survived Brexit as UK GDPR plus the Data Protection Act 2018. Every drive that held personal data stays a controller problem until you can show it was sanitised or destroyed. RecyclicTech is the documented exit for organisations — not a skip, not a household courier.

  3. 03

    Erase or physical destruction — which UK GDPR job is which?

    UK organisations ask “wipe or shred?” as if one answer wins. It does not. Erase keeps residual value when the drive can be sanitised to NIST SP 800-88. Physical destruction is for failed media, or when your policy forbids reuse. RecyclicTech will not certify a factory reset. If erase fails, that serial is destroyed and the exception sits on the same file — not sold as an upgrade.

  4. 04

    UK ITAD chain of custody — from the floor to Rădăuți

    Chain of custody is the list of handovers between your floor and the process that sanitises or destroys the media. RecyclicTech writes those handovers on the same file as the per-serial certificate. Collection is nationwide in the UK. Processing after collection is in Rădăuți, Romania. That movement is declared. A household courier on /donate/ is a different chain.

  5. 05

    What happens to old servers after a UK data-centre decommission?

    Old servers do not become scrap the moment the hall goes dark. In a UK colo cage or an on-prem room they are still UK GDPR assets. RecyclicTech inventories the lot, pulls data-bearing drives into a labelled stream, sanitises or destroys each serial, then tests what still has a market. Only then does WEEE-compatible recycling take the remainder. That is not a skip. Processing after collection is in Rădăuți — declared on the file.

  6. 06

    Is IT equipment collection free in the UK?

    “Free collection” is the line every UK ITAD page repeats. RecyclicTech means something narrower: organisations, when residual value and density carry the road freight to Rădăuți. A pallet of saleable servers from a Slough cage qualifies. A bag of broken keyboards from a home office does not. Households and schools use /donate/ and pay the courier. We will quote or decline a thin lot instead of hiding a lift charge behind a free promise.

  7. 07

    WEEE duty of care for UK ITAD — what actually closes the file

    When electrical kit becomes waste, UK duty of care does not leave with the van. GOV.UK is explicit: if you transport WEEE you need a waste transfer note or a hazardous-waste consignment note. RecyclicTech returns WEEE papers on the same file as the per-serial destruction certificates. We do not publish an Environment Agency permit, a T11 exemption or a Defra affiliation we have not been issued. Empty is more useful in an audit than a invented number.

  8. 08

    How a UK data-centre decommission actually runs

    A UK data-centre decommission is not a skip day. Neighbour cages stay live. Power and cooling stay up until the last serial is labelled. RecyclicTech inventories first, isolates data-bearing media, de-racks in the window you actually have, and sends the lot sealed to Rădăuți. Certificates follow the serials. We will not sell you a “48-hour UK-wide decommission” that no hall has ever run.

  9. 09

    Laptop and office-IT disposal under UK GDPR

    A closed laptop on a UK desk is still a controller problem. BitLocker “just delete the key” is not a certificate. RecyclicTech treats corporate laptop estates the same way as colo drives: inventory, NIST SP 800-88 per serial, chain of custody, WEEE papers for what has no residual value. Individuals and schools do not use this booking. They use /donate/ and pay the courier.

  10. 10

    NIST SP 800-88 in a UK GDPR ITAD file

    UK GDPR does not name NIST. Auditors do. RecyclicTech writes NIST SP 800-88 Rev. 1 on the certificate because it is the method we actually run: Clear, Purge or Destroy, chosen in the assessment, named per serial. IEEE 2883 exists for some flash media; we will name it when that is the method that ran. We will not print “DoD 3-pass” theatre or a factory reset dressed as Purge.

  11. 11

    Hard-drive destruction for UK organisations — per serial

    Hard-drive destruction in the UK is not a magnet over a skip. RecyclicTech isolates each HDD, attempts Purge when reuse is allowed, and physically destroys the serial when erase fails or your policy says no reuse. The certificate names the method. A recycling ticket, a crushed chassis photo or a “lot destroyed” line is a different document — it does not survive an ICO-shaped audit.

  12. 12

    SSD and NVMe destruction — why a magnet is the wrong UK answer

    An SSD is not a spinning disk. Degaussing it and calling the job done is a UK GDPR hole. RecyclicTech treats SATA SSD, SAS SSD and NVMe as flash: cryptographic erase or block erase where the method can be verified, physical destruction when it cannot. IEEE 2883 is named only when that is the method that ran. A magnet, a factory reset or a BitLocker “delete the key” line will not be certified.

  13. 13

    ITAD is not the same job as IT recycling

    IT asset disposition is inventory, sanitisation, residual-value, then recycling of the remainder. IT recycling is a waste route. UK pages collapse the two because “recycle” ranks. RecyclicTech will not. A WEEE transfer note proves metal moved. A per-serial NIST SP 800-88 certificate proves the data is gone. You usually need both. You never need a skip labelled ITAD.

  14. 14

    On-site or off-site destruction — which UK job is which?

    UK buyers ask for on-site shredding because a witness feels like proof. RecyclicTech will run an on-site window when the assessment says the hall can take it. Default for organisational lots is sealed freight to Rădăuți, with the depot on the certificate. A witness without serials is theatre. Off-site without a declared plant is a hole. We print the location that actually ran.

  15. 15

    How to choose a UK ITAD vendor without buying a badge page

    Most UK ITAD landing pages are a stack of badges: a claimed ICO number, an ADISA mark, a T11, an ISO seal, a London warehouse. RecyclicTech’s RFP answer is shorter. We print a Companies House number you can open (17420819), a depot you can find (Rădăuți), NIST SP 800-88 per serial, and WEEE papers. We leave ICO, ADISA, Environment Agency permits and ISO 27001 certificate numbers empty until they can be checked. Empty is the useful signal. A badge you cannot verify is not.

  16. 16

    What we put in a UK ITAD file — and what we refuse to print

    UK ITAD blogs copy the same claims: ICO-registered, T11 exemption, ISO certified, a DEFRA consignment ID already printed. This page is the file RecyclicTech actually returns. It is shorter than those blogs because we do not print numbers we do not hold.

  17. 17

    Who RecyclicTech is in the UK — and is not

    This page is the entity file for the United Kingdom edition. RecyclicTech is the trading style of Service Parts Online Ltd. It is not a second home page.