Do you need a certificate of data destruction in the UK?

What a certificate of data destruction is

It is a dated record that a specific piece of media was erased or physically destroyed, and by which method. Auditors, insurers and the ICO ask for that record. They do not ask for a photograph of a skip.

Is it a legal requirement?

UK GDPR does not say “you must hold a PDF titled Certificate of Data Destruction”. Article 5(1)(f) and Article 32 require appropriate security, including at end of life. Article 5(2) requires you to demonstrate it. Without a serial-level record you can only assert disposal. That is the gap other blogs fill with invented fine tables. Read the ICO. We link it below.

What RecyclicTech prints — seven lines

This is the list on our file, not a wish-list copied from a competitor’s blog.

1. Identity of the media — drive or asset serial.
2. Method: NIST SP 800-88 Rev. 1 Clear, Purge or Destroy, as chosen in the assessment.
3. Date the method ran.
4. Processing location: Strada Putnei 213, 725400 Rădăuți, Romania.
5. Chain of custody from the UK floor to that process.
6. Itemised asset list with the disposal route — reuse, remarket or WEEE.
7. WEEE duty-of-care papers on the same file. Digital Waste Tracking consignment ID: only when we hold a real one.

A recycling ticket is not the certificate

A waste transfer note shows a load of equipment left the building. It is useful. It is not proof that the SSD in row 14 was purged. Commodity collectors issue one WTN for the van and call it GDPR. RecyclicTech will not. If you already have a recycling ticket and no serials, you do not yet have the evidence Article 5(2) is asking for.

A factory reset is not destruction

Deleting files, formatting, or a laptop factory reset removes pointers. The data is usually still on the media. The ICO’s own disposal guidance talks about wiping, degaussing or hardware shredding — documented. RecyclicTech will not certify a reset.

Batch “lot destroyed” versus per serial

Some UK collectors sell a standard certificate for the collection and an “enhanced” per-device report as an upgrade. RecyclicTech’s default is the per-serial line. If a drive fails erase, it is destroyed and that exception is on the same file. We do not sell you a weaker PDF and call the real one an add-on.

Q4 2026 — Digital Waste Tracking

From October 2026, permitted waste receivers in England, Wales and Northern Ireland must use the GOV.UK Digital waste tracking service (Scotland from January 2027). When RecyclicTech holds a real consignment ID for a lot, that ID is added to the same file as the certificates. Until then the line stays empty on purpose. We will not print a placeholder ID to look like the blogs that already display one.

How to get one

Organisations: request a UK assessment. Describe sites, kit and postcodes. Collection is free when residual value and density carry the freight. Households and schools use /donate/ and pay the courier — they do not get this corporate certificate.