+ Post New Thread
Results 1 to 1 of 1
School ICT Policies Thread, Data Protection implications of asset disposal - ICO issue guidance in School Administration; ...
  1. #1

    Join Date
    Dec 2007
    Location
    Potomac, MD, USA
    Posts
    60
    Thank Post
    10
    Thanked 24 Times in 12 Posts
    Rep Power
    54

    Data Protection implications of asset disposal - ICO issue guidance

    The ICO has recently issued guidance on secure disposal of IT equipment, the full details of which can be found here: IT disposal - Data Protection Guidance for Organisations - ICO

    There were a couple of points in the overview that stood out for me though. Here's all their points, but the last two are interesting...

    When disposing of old IT equipment you should:

    • ensure that the responsibility of asset disposal is assigned to a member of its staff with a suitable level of authority;
    • complete a full inventory of all equipment that you have marked for disposal;
    • be clear about what will happen with devices when you no longer need them;
    • consider the security vulnerabilities associated with each method of disposal;
    • ensure you delete personal data before recycling devices, so that data is not accessible to others after the device has left your ownership;
    • be aware that any specialist service provider you use will be considered to be a ‘data processor’ under the DPA; and
    • have a written contract in place between you and the data processor, ensuring that there is an appropriate level of security in place.
    I've always erased hard disks before handing them over, but the company we use do their own erasure, which suggests not everyone does. However, we've never entered into a written contract with them, and according to the ICO, this is required under the DPA if they are doing the erasing for you. I wonder how many schools do this?

  2. Thanks to JSchlackman from:

    elsiegee40 (29th November 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 20
    Last Post: 24th September 2011, 12:51 PM
  2. Replies: 1
    Last Post: 24th November 2010, 10:29 AM
  3. Replies: 18
    Last Post: 5th October 2009, 12:21 PM
  4. ePortal - external access data protection issues
    By cheredenine in forum MIS Systems
    Replies: 3
    Last Post: 1st May 2009, 08:44 PM
  5. Data Protection : Real life examples of consequences?
    By contink in forum How do you do....it?
    Replies: 21
    Last Post: 14th July 2007, 10:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •