Dear Aberdeen College,

I would like to know about your organisation's provisions for the disposal / recycling / selling on of end-of-life and damaged IT equipment, for example computers, laptops, peripherals, network equipment, printing equipment, servers.

Specifically:

1 - Is data stored on magnetic media securely erased (DoD wipe or similar) prior to removal from site?

2 - Is full-disk encryption used on non-magnetic media (SSDs etc.) to prevent data loss?

3 - Is a third party contracted to remove such equipment, and if so, what criteria do these parties have to meet to place a bid to dispose of equipment for your organisation?

Thank you very much for your time, I look forward to hearing from you.

Yours faithfully,

Mr. Robert Muldoon.

MAY PAULINE,

Dear Mr Muldoon,

Thank you for your request below in relation to IT equipment disposal at
Aberdeen College.

The information you requested is as follows:

1- Is data stored on magnetic media securely erased (DoD wipe or similar)
prior to removal from site?

No, the College's disposal supplier securely erases the data as per the
following procedure and supplies certificates of compliance:

· All equipment which is capable of storing data is transferred
into a secure area within The Company’s premises upon receipt, and does
not leave this area until data deletion procedures have been applied and
an operative has signed to confirm that data deletion measures have been
applied.

· The Company has discovered certain vulnerabilities in many of
the software applications commonly used to delete data and has therefore
invested in the Carlisle model.1000 belt degaussing system. With effect
from January 1st 2004, The Company utilises physical degaussing procedures
to effect data deletion.

· The Company does not use sub-contractors to effect collection
of equipment, and no vehicle is left unattended while loaded. The Company
has effected alterations to its premises to facilitate the parking of
vehicles inside its premises, thus ensuring that no goods are left in
vehicles overnight outside the Company’s premises.

2 - Is full-disk encryption used on non-magnetic media (SSDs etc.) to
prevent data loss?

The College has very few devices that utilise SSD and have not, to date,
disposed of any such equipment via a contractor. Given the complexity of
data erasure from SSD it is likely that this would be considered
separately.

3 - Is a third party contracted to remove such equipment, and if so, what
criteria do these parties have to meet to place a bid to dispose of
equipment for your organisation?

The College has no contract for the disposal of such equipment. A
supplier, that is a member of a purchasing consortium in which the College
participates, provides the service free of charge, including collection,
certification and destruction.

I trusts that this answers your query, however should you require any
further information please do not hesitate to contact me.

Regards

Pauline May

Planning Manager

Aberdeen College

show quoted sections

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org