Throwing a computer in the trash, or donating it untouched, can expose customer data, credentials, and business records.

Step 1: Inventory

Record every device being retired, with its serial number and owner. This supports audit trails and compliance.

Step 2: Back up what you need

Confirm that required data is safely stored elsewhere before anything is erased.

Step 3: Remove access

Delete the device from your management systems and revoke certificates, VPN profiles, and accounts tied to it.

Step 4: Sanitize the data

Choose a method based on sensitivity (see our guide to wiping vs. shredding). Don’t rely on simply deleting files or reformatting. Both leave recoverable data.

Step 5: Choose a responsible recycler

Use a certified electronics recycler that provides:

– Chain-of-custody documentation

– A certificate of data destruction or recycling

– Environmentally responsible processing

Step 6: Keep records

Retain certificates and logs. They demonstrate due diligence if questioned by auditors, insurers, or regulators.

Don’t forget

– Printers, copiers, and scanners with internal drives

– Phones and tablets

– Network equipment with stored configurations

– USB drives and backup media

Privacy law

If devices contained personal information, Quebec’s Law 25 expects you to destroy or anonymize it securely when it’s no longer needed.

DBR Soft can coordinate secure retirement and certified recycling of your equipment. Contact us for more information.