How to Dispose of Old Computers (UK Business Guide)
Key takeaways
- Business computers are WEEE and cannot legally go in general waste or a skip.
- Data on hard drives remains your responsibility under UK GDPR until it is securely destroyed.
- You must keep a Waste Transfer Note for every collection as proof of compliant disposal.
- Around 10 or more IT items usually qualifies for free collection nationwide.
- Certified wiping or physical destruction protects you from data-breach liability.
- A reputable provider operates to a zero-to-landfill ethos and is a registered upper-tier waste carrier.
Knowing how to dispose of old computers as a business is about more than tidying a store cupboard — it is a legal, data-protection and environmental responsibility rolled into one. Old desktops, laptops and all-in-ones are classified as waste electrical and electronic equipment (WEEE), and they almost always hold recoverable data. This guide walks UK organisations through the whole process, from inventory to the paperwork that proves you did it properly, so business computer disposal becomes a controlled, repeatable routine rather than a recurring headache.
Why you cannot just bin old business computers
Computers contain a mix of hazardous substances and valuable recoverable materials — lead, mercury in some older displays, brominated flame retardants, copper, aluminium and precious metals on circuit boards. Because of this, they fall squarely under the WEEE Regulations 2013, which require electronic equipment to be treated and recycled through approved channels rather than landfilled.
Sending computers to general waste also breaches your duty of care under the Environmental Protection Act 1990. That duty does not end when the kit leaves your loading bay; as the producer of the waste you remain responsible for ensuring it reaches an authorised facility. The Environment Agency can investigate and issue penalties where waste is not handled correctly, and liability follows the waste up the chain.
There is also a reputational dimension. Fly-tipped or improperly exported electronics frequently carry asset tags and serial numbers that trace straight back to the original owner. For any organisation that publishes sustainability commitments, a single mishandled disposal can undermine an otherwise credible ESG position.
The data risk hiding in every old machine
The single biggest reason to take business computer disposal seriously is data. A formatted or deleted drive is not a wiped drive — files remain recoverable with freely available tools. Under UK GDPR, personal data must be disposed of securely, and an old machine leaving your building with intact data is a reportable breach waiting to happen.
The Information Commissioner's Office (ICO) treats insecure disposal as a failure of the security principle, and breaches involving personal data can be reportable within 72 hours. The cost of getting this wrong is rarely the device itself — it is the investigation, notification and loss of trust that follows.
What counts as a data-bearing device
It is not only the obvious computers. Any device that stores information should be treated as data-bearing and handled accordingly, even where the storage is hidden inside an appliance you would not normally think of as a computer.
- Desktops, laptops, all-in-ones and workstations
- Servers and network-attached storage (NAS)
- External hard drives, USB sticks and SD cards
- Multifunction printers and photocopiers with internal drives
- Smartphones, tablets and some networking appliances
Your obligations as a data controller
The ICO expects organisations to apply appropriate technical and organisational measures when disposing of equipment. In practice that means certified wiping to recognised standards, or physical destruction, with documentation you can produce in an audit. The National Cyber Security Centre (NCSC) publishes guidance on sanitising storage media that many UK organisations align their policies to.
Step-by-step: how to dispose of old computers properly
A reliable disposal follows a consistent sequence so nothing is missed. The steps below work whether you are clearing five machines from a back office or several hundred during a refresh.
- Create an inventory of every machine, noting which hold sensitive data.
- Back up or migrate any data you still need before disposal.
- Remove asset tags and update your IT asset register.
- Book a collection with a registered WEEE recycler.
- Have data-bearing drives wiped or destroyed to a recognised standard.
- Collect your Waste Transfer Note and Certificate of Destruction.
- File the paperwork for at least two years for audit purposes.
Preparing your computers for collection
A little preparation makes collection day faster and safer. Power down machines properly and group them by type so the recycler can count and process them efficiently. If you are retaining any software licences, peripherals or docking stations, separate those before the team arrives.
Confirm whether any drives need to stay on-site for in-house wiping, or whether the recycler will handle data destruction. Where possible, photograph the consignment and note serial numbers — this strengthens your chain of custody and makes reconciliation against the asset report straightforward.
A simple pre-collection checklist
Running through a short checklist avoids the common last-minute scramble and ensures the right items leave in the right way.
- Identify and flag every data-bearing device
- Remove batteries that are swollen or damaged for separate handling
- Detach personal items, accessories and licences to keep
- Note serial numbers for high-value or regulated assets
- Ensure a clear access route for the collection team
Reuse, refurbish or recycle: choosing the right route
UK waste law is built around the waste hierarchy, which prioritises reuse over recycling and recycling over disposal. Applying it to your old PCs means asking whether each machine has a viable second life before defaulting to material recovery.
When refurbishment makes sense
Machines only a few years old often have a second life once data is securely removed. Refurbishment is the most sustainable outcome under the waste hierarchy and can support social value or ESG objectives, sometimes returning a modest value to the business or to a chosen cause.
When recycling is the right call
End-of-life or faulty machines should be dismantled so materials can be recovered and reintroduced into manufacturing. A good computer recycling service separates components for maximum material recovery and keeps nothing back for landfill, recovering metals, plastics and circuit-board components for reprocessing.
The compliance paperwork you must keep
Two documents protect your business. The Waste Transfer Note records the transfer of waste to a registered carrier and is a legal requirement for every collection; it should describe the waste, identify the parties and reference the carrier's registration. The Certificate of Destruction evidences that data-bearing media were destroyed securely, which is your defence in any ICO enquiry.
Keep both on file for at least two years — many organisations retain them longer to satisfy auditors, insurers and customers. For regulated sectors, a serialised asset list mapped to the Certificate of Destruction gives device-level proof of exactly what was collected and what was destroyed.
Is business computer disposal really free?
For qualifying volumes — generally around 10 or more IT items such as laptops, desktops, monitors and servers — collection is free. The cost of collection, transport and processing is recovered through responsible recycling of the materials, so there is no charge for the service or the documentation.
Where charges occasionally apply, they relate to very small quantities, specialist hazardous items or jobs needing significant additional labour. A transparent provider explains any cost before you commit, and includes the Waste Transfer Note and basic certified wiping as standard rather than as paid extras.
Common mistakes UK businesses make
Most disposal problems are avoidable and stem from treating end-of-life IT as an afterthought. Recognising the usual pitfalls helps you design them out of your process.
- Storing redundant kit in cupboards for years, increasing data risk.
- Relying on a quick format instead of certified wiping.
- Using an unregistered carrier with no Waste Transfer Note.
- Forgetting that printers and copiers contain hard drives.
- Failing to keep disposal records for audits and ESG reporting.
- Assuming a broken machine carries no recoverable data.
How Ewaste.org.uk handles old computer disposal
Ewaste.org.uk provides free collection nationwide for qualifying volumes of around 10 or more IT items, as a registered upper-tier waste carrier. Every collection comes with a Waste Transfer Note, and data-bearing devices are covered by certified wiping or physical destruction with a Certificate of Destruction on request.
Everything is handled to a zero-to-landfill ethos: reusable machines are securely wiped and refurbished, while end-of-life units are dismantled for material recovery. You can arrange a collection or talk through a refresh on 020 4524 7964, and out-of-hours slots can be agreed where disruption to the workplace needs to be kept to a minimum.
Building a repeatable disposal process
Organisations that refresh hardware regularly benefit from a standing process rather than ad-hoc clear-outs. Agree a default recycler, a data-destruction standard and a documentation routine so every retirement of equipment is consistent, secure and audit-ready.
Embed disposal into your asset lifecycle from procurement onwards: tag assets, record where data lives, and plan end-of-life at the point of purchase. A repeatable process reduces the amount of redundant kit sitting around, shrinks your data-risk window and produces a clean, continuous audit trail.
Need help with this? Learn more about our computer recycling service or arrange a free, no-obligation collection today.
Ready to book a free collection?
Free, compliant, nationwide WEEE collection for UK businesses — with full documentation as standard.
Frequently asked questions
Can a business put old computers in the skip?
No. Computers are classified as WEEE and must be recycled through approved channels. Skipping them breaches the WEEE Regulations 2013 and your duty of care under the Environmental Protection Act 1990, and risks a data breach if drives are intact.
Do I need to wipe computers before disposal?
Yes. Under UK GDPR you must ensure data is destroyed securely. Certified wiping or physical destruction is recommended, with a Certificate of Destruction kept on file as evidence for any ICO enquiry.
How many computers do I need for free collection?
Around 10 or more IT items typically qualifies for free nationwide collection. Smaller quantities can sometimes be combined with a scheduled route or with other redundant equipment to reach the threshold.
What paperwork should I receive?
A Waste Transfer Note for every collection, plus a Certificate of Destruction for any data-bearing devices. Keep both for at least two years for audit, insurance and ESG purposes.
What happens to the computers after collection?
Reusable machines are securely wiped and refurbished; end-of-life units are dismantled so materials are recovered and recycled under a zero-to-landfill ethos, with nothing usable sent to landfill.
How long should I keep disposal records?
Waste Transfer Notes should be kept for at least two years. Many organisations keep them and the related Certificates of Destruction for longer to satisfy auditors, insurers and customers.
Is a deleted file really still recoverable?
Yes. Deleting a file or formatting a drive only removes the pointer to the data, not the data itself, which remains recoverable with widely available tools. Only certified wiping or physical destruction reliably removes it.