Do I Need a Waste Transfer Note for IT Equipment?

What the law actually requires when business IT leaves your building, and how to check a supplier is licensed.

Last updated 7 August 2026 · Written by the team at Revolve ITAD Solutions, Sowerby Bridge

Short answer: yes. If you are a business disposing of IT equipment in England, you have a legal duty of care over that waste, and that duty does not end when someone drives away with it. Here is what that means in practice.

Duty of care in plain terms

Businesses producing waste have a duty of care requiring, among other things, that waste is transferred only to an authorised person and that the transfer is documented. "Authorised person" has a specific meaning — it is not simply someone who agreed to take it.

The critical point that catches people out: you cannot contract out of this responsibility. If your equipment is fly-tipped, the trail can lead back to you, and "we paid a company to take it away" is not a defence if you never checked that company was registered.

How to check a supplier in under a minute

Anyone transporting your waste must be registered with the Environment Agency as a waste carrier. The register is public and free.

  1. Ask the supplier for their waste carrier registration number.
  2. Search for it on the Environment Agency public register.
  3. Check the name matches the company you are dealing with, and that it is current.

Apply this to us too. Our registration is and the register link is in our footer. A supplier who cannot produce a number cannot lawfully move your waste, and one who is reluctant to give you it is telling you something useful.

What paperwork you should receive

At minimum, a waste transfer note or equivalent documentation recording what was transferred, when, between whom, and where it was going. Keep these records — for standard waste transfers the expectation is two years.

For IT specifically, that legal minimum is rarely enough on its own. Because retired IT holds personal data, you have a second and separate obligation under UK GDPR, which the waste paperwork does not address at all.

Two different obligations, frequently confused

Waste duty of care Concerns the physical material. Satisfied by transfer documentation and using a registered carrier.
UK GDPR Concerns the data on the device. You remain the data controller until the data is verifiably destroyed. Satisfied by evidence of destruction.

A weighbridge ticket satisfies the first and does nothing for the second. This is why serialised certificates of destruction matter: they are the only documentation that ties a specific device to a specific outcome.

Hazardous waste and IT

Some IT waste falls into hazardous categories — CRT monitors and certain batteries in particular — and carries stricter handling and documentation requirements. If you are disposing of older display equipment or quantities of loose batteries, mention it when you book so it is handled and documented correctly rather than discovered on the day.

What good looks like

After a properly handled collection you should hold:

If a supplier provides only the first of those, you have met the waste requirement and left the data requirement entirely unaddressed.

This guide is general information about business waste duty of care in England, not legal advice. Requirements differ in Scotland, Wales and Northern Ireland. If you are unsure of your obligations, check the current Environment Agency guidance or take professional advice.

Questions this guide did not answer?

Call us and ask. We would rather give you a straight answer than a brochure — even if the answer is that you do not need us.

Call 01422 416821 →

Frequently asked questions

Do I legally need a waste transfer note for old computers?
Yes. Businesses in England have a duty of care requiring waste to be transferred only to an authorised person, with the transfer documented. Keep the records — two years is the usual expectation for standard transfers.
How long should I keep waste transfer documentation?
Two years for standard waste transfers. Records relating to data destruction are worth keeping considerably longer, since they are your evidence under UK GDPR if a question arises years later.
Am I liable if my IT disposal company fly-tips my equipment?
Potentially, yes. Duty of care requires you to transfer waste only to an authorised person, and liability can follow back to the producer. Checking a supplier’s Environment Agency registration on the public register is free and takes under a minute.
Is a waste transfer note enough to satisfy GDPR?
No. These are two separate obligations. Waste documentation covers the physical material; UK GDPR covers the data on the device and requires evidence that it was actually destroyed. Serialised certificates of destruction address the second.

Related services

More guides

Chat with Revolve ITAD 👋 Got a question about a collection, data destruction, or pricing? Message us on WhatsApp — we usually reply within minutes.