Do you dispose and recycle you computers securely ?

Posted on Posted in IT

Each year companies have to deal with an increasing amount of obsolete hardware. This is equipment that is under-powered or out of warranty, but nonetheless working and still functionally useful. The bulk of this equipment is typically desktop PCs and laptops, but the same also applies to peripherals, such as monitors, USB hard-drives and projectors.

Simply storing these computers means expensive floor space is being taken up. The problem has now reached the point where it is not uncommon to find IT departments inundated with piles of redundant computer hardware. Not only does this pose a potential trip-hazard and a risk of heavy items toppling over, but it also presents a poor impression to any guests visiting the office.

Computers include many components that are made from potentially harmful materials, such as lithium and mercury, which are toxic to the environment, as well as valuable resources including precious metals. As such, current legislation prevents companies from disposing of this hardware in landfill sites.

To comply with the Waste Electrical and Electronic Equipment (Weee) European Union Directive, which is managed by the Environment Agency in the UK, companies must ensure their hardware is recycled responsibly.

Many companies allow staff to take their obsolete hardware for home use, in return for a small fee. These funds can either be used to offset the expense of buying new hardware, or as a donation to a nominated charity. However, this approach is not without some dangers. There have been several incidents in the past where old computers have been sold, only for their new owners to discover that they can still access files. One example of this, from 2007, was when case notes about vulnerable children were discovered on a computer that had previously been owned by Southend Borough Council and had been sold on eBay’s auction site by a third-party recycling firm.

There is a dangerous and commonly held assumption that re-installing the operating system will ensure all files are deleted. This is not true. All this process does is remove the links to the previously saved files, which can be easily found using data recovery software, such as Recuva by Piriform.

Professional data wiping tools

To ensure their data is not retrievable, companies need to use professional data wiping tools, such as Blancco, which is approved by the Ministry of Defence. This software wipes all of the previously saved files from a computer’s hard-drive, or any form of hard-drive for that matter, by overwriting the entire hard-drive with meaningless data, essentially copying over the existing files in such a way that they are unrecoverable.

There are also free versions of data-wiping software available on the internet, such as Active Kill Disc. These are not as robust or thorough as the paid-for versions of software, but can be an acceptable alternative for computers that have never been used to process sensitive information – personal or commercial data, for example.

Once the memory has been thoroughly wiped and checked, companies are then able to repurpose this hardware.

In recent years, many companies have become concerned they might contravene the Weee Directive by selling on their computer equipment. This is in fact not the case, as provided the equipment is working, the hardware is still classified as electrical and electronic equipment (EEE), rather than waste, and as such is not subject to Weee legislation.



Views All Time
Views Today