David Brent on Electronic Equipment Disposal Risk [Podcast]

2
49

By Adam Turteltaub
adam.turteltaub@corporatecompliance.org

Congratulations:  they’ve given you a new laptop or phone.  Condolences:  you better know what they plan on doing with your old device.

It’s not enough to simply put them in the trash or send them off to any ewaste recycler, explains David Brent of ERI, an electronic waste recycler.  There are a variety of laws that affect how technology is disposed of from both a privacy and ewaste perspective.  GLBA, HIPAA Hitech, GDPR, FACTA and the FTC Final Disposal Rule provide a reasonableness standard for disposal of protected information.  In addition, 32 states have data disposal laws of their own.  These laws typically require destruction or erasure so that the data cannot be practically read or reconstructed.  And don’t forget that phones and laptops aren’t the only devices to worry about.  Printers, copiers, and even projectors may hold data on them as well.

Adding to the risk:  Electronic waste contains toxic metals.  Eighteen states plus the District of Columbia have landfill bans on electronic equipment.

For these reasons companies often turn to electronic recycling firms.  They can help manage the environmental and data risks.  However, due diligence is critical, Brent explains.  Having the right certifications can be a good sign, when assessing a vendor, but it’s important to do your own due diligence to ensure that they are doing what they are supposed to and that your devices and data don’t end up in the wrong place or hands.

Listen in to the podcast to learn more.

2 COMMENTS

  1. Coincidentally, OCR posted:

    July 2018 OCR Cybersecurity Newsletter: Guidance on Disposing of Electronic Devices and Media – PDF at the link below.

    It’s a quick read and offers some very sound advice on points to consider when considering how to dispose of electronic devices and media to include considerations of the information that may be involved.

    Link:
    https://www.hhs.gov/sites/default/files/cybersecurity-newsletter-july-2018-Disposal.pdf

LEAVE A REPLY

Please enter your comment!
Please enter your name here