GP Surgery & Primary Care IT Disposal

Why practices need more than a recycler

Every machine in a GP surgery has had access to patient records. Even where the clinical system runs centrally, local machines hold cached documents, scanned letters, downloaded results, exported reports and email. Reception PCs are often the worst, because they are used by everyone and cleared by no one.

The practice is the data controller for its patient records, so the obligation to show that retired devices were destroyed properly sits with the partners. That evidence feeds straight into your Data Security and Protection Toolkit return. We work with GP surgeries already, and the paperwork is designed to be filed, not explained.

Check who owns the hardware first

This is the question that catches practices out most often. In England, a good deal of GP IT hardware is funded by the integrated care board and managed by its IT provider or commissioning support unit, not owned by the practice. Before you book a collection:

• Check whether the machines carry an ICB or CSU asset tag
• Ask your GP IT provider whether they have their own disposal arrangement
• If the practice did buy the equipment itself, it is yours to dispose of, and we can collect it directly

If you are not sure, tell us what the labels say and we will help you work it out. It is much easier to settle before collection than to chase a missing certificate afterwards.

What we collect from practices

A typical surgery clear-out includes more than desktops. We regularly take:

• Consulting room and reception PCs, laptops and monitors
• Networked printers, scanners and MFDs, which keep copies of scanned documents
• Old servers from before the clinical system moved to the cloud
• Loose hard drives, USB sticks and backup media found in a drawer
• Phones, tablets and old telephony hardware
• Patient check-in screens and call display hardware

Every drive is sanitised to NIST 800-88 Rev 2 Purge standard. Anything that cannot be verifiably wiped is degaussed if mechanical or shredded if solid state. Chain-of-custody records come with every collection. Serialised reports and tamper-evident Certificates of Destruction per device are part of our Premium service, where a fee may be charged to cover costs.

Mergers, relocations and PCN changes

Practice mergers and moves into new premises tend to leave a room full of equipment nobody wants to decide about. That is often where data goes missing: a machine from the old branch surgery that was never wiped, or a server nobody switched off. If you are merging or moving, book the IT clear-out as part of the plan, and list every site so nothing is left behind.

Dental practices, pharmacies and opticians

The same principles apply across primary care. Dental practices hold clinical notes and X-ray images on local machines and imaging workstations. Community pharmacies hold patient medication records and NHS service data on their PMR systems. Opticians hold clinical records and retinal images. All of it is special category data, and all of it needs documented destruction.

Small loads are normal

There is no minimum collection size in our local area. A practice retiring six PCs and a printer is a perfectly ordinary job. For most loads with recoverable value there is no charge, and where there is a cost we will tell you before we arrive. Further afield, we plan practice collections into our regular runs, so a little flexibility on timing helps.