What to do with Old School Laptops: The WEEE & Data Obligations
Learn how to dispose of old school laptops in the UK compliantly, meeting WEEE and GDPR rules, with the documentation you need to keep.
Every school IT department has a store cupboard, a locked cabinet, or a shelf in the server room, filling up with laptops that have reached the end of their lives. Usually there’s nothing urging anyone to deal with them. But that pile of old devices is waste electrical and electronic equipment, or WEEE, and it's a compliance risk that could present a problem, whether or not anyone is planning what to do with it.
The reason most IT managers underestimate the task is that they're only picturing one obligation. In reality, there are two, and they are separate. Getting rid of old laptops the wrong way can leave a school or trust exposed on both fronts at once.
There are two main obligations for clearing away old laptops. The first is environmental. Under the WEEE Regulations from 2013, a school generating electrical waste has a duty of care for what happens to it after it leaves the building. That means using a registered waste carrier and sending devices to a permitted treatment facility, with a hazardous waste consignment note as evidence the chain was followed correctly. This is a legal requirement regardless of what's stored on the devices. An empty laptop with a wiped hard drive still has to be disposed of in this way.
The second obligation is about the data on those devices, not the devices themselves. The UK has a strong data protection legislation, known as GDPR which stands for General Data Protection Regulation. Under GDPR, schools have to ensure that personal data is securely and irreversibly destroyed on all equipment before it leaves their premises. That includes data that belongs to staff, pupils, or parents. This sits alongside the WEEE duty of care. Satisfying one of the obligations does nothing to satisfy the other. A school can dispose of laptops through a fully compliant WEEE route but still be in breach if the data on them wasn't properly destroyed, and vice versa.
Old laptops tend to leave schools in one of a few informal ways: donated to a charity, put out with a general skip, or handed to staff to take home or dispose of themselves. While each of these feels like a reasonable, low-effort solution, they aren’t solutions that comply with waste disposal laws.
A charity donation doesn't come with a waste consignment note, and it rarely comes with any documented proof that data was removed to a defensible standard. General waste skips aren’t intended for electronic equipment, so using a skip for disposal almost certainly breaches the WEEE duty of care outright. Once a device leaves the building in someone's bag, the school has lost any ability to demonstrate what happened to the data on it. If a laptop resurfaces later with recoverable files still on it, "we assumed it had been wiped" is not an explanation that the Information Commissioner's Office (ICO), as the UK’s independent regulator for data protection and information rights, is likely to take lightly.
That last point matters more than most IT managers realise. Factory resets and standard file deletion are not usually enough to ensure personal data has been irreversibly destroyed. This is because data can be recovered using tools that are readily available. A factory-reset laptop has the potential to expose personal data to its next owner. To reduce this risk and demonstrate compliance, schools should ensure disposed laptops undergo secure data destruction using a recognised process. Reputable providers will supply a destruction certificate listing each device covered by the process, giving the school documented evidence if a parent, an auditor or the ICO ever asks what happened to a specific machine.
Properly handled, laptop disposal has two strands running in parallel: WEEE-compliant collection and processing through a licensed carrier, and certified data destruction carried out separately for every device. Done well, this doesn't need to be two separate arrangements chased through two separate suppliers. A single IT disposal partner can manage both strands at once.
Using just one IT disposal partner offers schools an simpler disposal method. It cuts down the time needed to look for two providers and means there’s no dealing with two sets of paperwork. One company handling the full process offers schools less coordination alongside a complete audit trail.
For every disposal run, a school should end up with a hazardous waste consignment note confirming the WEEE route was followed, and a destruction certificate listing each device by serial number or asset tag, confirming data was destroyed to a recognised standard. It’s important that consignment notes are kept on record for three years. But overall, it’s both documents together that demonstrate compliance if anyone asks the question later, and neither one substitutes for the other.
The backlog of old laptops is common in education. It's just what happens when there's no clear process for dealing with devices at the end of their life. The fix isn't complicated once the two obligations are understood. The fix also doesn't need to involve juggling multiple suppliers or chasing paperwork after the fact.
GAP handles both sides of the process in one service: WEEE-compliant collection through a licensed carrier, and certified data destruction with a device-by-device certificate for every laptop. Talk to GAP about compliant IT and data disposal for your school or MAT.
