A solicitor's duty of confidentiality does not end when a laptop is retired. Every device that leaves the firm carries client matters with it until someone proves otherwise.
Law firms hold a combination of data that few other organisations do: client identity and financial information, privileged communications, medical records in personal injury and clinical negligence work, criminal records, family and safeguarding material, and commercially sensitive documents in transactional work. Much of it is special category or criminal offence data under UK GDPR.
The SRA expects solicitors to keep the affairs of current and former clients confidential. A retired laptop with a cached copy of a matter file, or an old server nobody wiped, is exactly the kind of failure that turns into a reportable breach, a complaint and a conversation with your insurer.
Document management systems keep the master copy centrally, but fee earners' machines still hold plenty: offline copies, Outlook data files with years of client correspondence, downloaded bundles, scanned evidence and drafts saved to the desktop "just for now". Beyond laptops and desktops, check for:
Tell us about all of it. If something is outside what we can lawfully take, we will say so rather than accepting it.
Professional indemnity insurers, Lexcel assessors and corporate clients increasingly ask how a firm disposes of data-bearing equipment. "Our IT company took it" is not an answer. What we provide:
Legal sector consolidation means a lot of firms are merging systems, closing branch offices or moving to smaller premises. Those are the moments when old equipment gets left in a basement or shipped off with the furniture. If you are merging or closing an office:
Chambers and sole practitioners carry the same obligations with far less IT support. A handful of laptops and a dictation machine is a perfectly normal collection for us, and in our local area there is no minimum load.
Tell us what you are retiring and we will give you a straight answer on cost, timing and documentation.
Book a Collection →NIST 800-88 Purge wiping, degaussing and shredding, with certificates of destruction.
Learn more →Degaussing and shredding for drives that must be physically destroyed, at our facility or on site.
Learn more →Unmarked, GPS-tracked vehicles collecting from offices, schools and restricted sites.
Learn more →Patient data is special category data. Disposal has to be evidenced, not assumed.
View →Small volumes, special category data and the question of who owns the hardware.
View →Safeguarding and SEN data on retired kit, and a summer window that fills fast.
View →Multi-site refreshes, asset register reconciliation and ESG reporting that stands up.
View →Defensible audit trails, framework compliance and social value evidence.
View →Rack decommissioning, serial-level control and white-label work for providers.
View →Shop-floor terminals, machine control PCs and legacy drive interfaces.
View →Network hardware holding live configuration, credentials and topology.
View →Handheld fleets, vehicle-mount terminals and warehouse systems.
View →Customer financial data, regulator expectations and backup media that outlives the system.
View →Vulnerable people's data, tight budgets and equipment that deserves a second life.
View →White-label capacity and licensed processing for other providers.
View →