Document destruction companies are almost inevitably presented with opportunities to enter the electronic information destruction business.
Before jumping at the opportunity, there are a number of factors to consider and certainly a great deal to learn before taking possession of hard drives or storage media for destruction purposes.
Afew of the most important points document destruction companies should be aware of before expanding into this field follow.
1. Investigate the need for permits in your region.
Electronic equipment recycling and destruction regulations vary widely from state to state. Make sure that you have done due diligence on the environmental regulations and permitting requirements of your jurisdiction(s). In addition, talk with your state and local environmental enforcement officials about any pending legislation that they might be aware of so you can design your program accordingly.
2. Realize that you potentially will be handling hazardous waste and stay safe.
Computer monitors hold a cathode ray tube (CRT) that contains 5 to 8 pounds of lead. Once the CRT is broken, the lead dust is released into the air, along with highly toxic phosphor dust.
These hazardous dusts can be inhaled by employees, not to mention carried home on clothing, which could expose their childen to the lead. OSHA requirements specific to lead can be found in 29 CFR Ch. XVII, s/s 1910.1025. Additionally, most circuit boards also contain tin-lead solder, so this must be considered as well.
Is it Really Important by Michael Magliaro |
Storage technology users and OEMs (original equipment manufacturers) are becoming very concerned about data security within their organizations. Hard copy documents are not a company’s only legal exposure. Sitting on every business desk is a computer with a hard drive full of company and customer information. In the wrong hands, this information could expose a company to legal action by a victim of identity fraud or worse. Secure destruction companies can raise several questions with current and prospective customers regarding how they handle these devices when they become obsolete, such as: Does your company have a plan for your IT equipment at the end of its life? Where does this equipment go when your company replaces it with new systems? Is it donated? Is it sold to employees? What happens to the data that was on your hard drives? Equipment that has residual value probably will be sold to a company that will refurbish it and sell it overseas. If it is too old or unrepairable, it will probably be recycled and exported as scrap to China. Taizhou, China, received 1.5 million tons of scrap computer hardware in 2003. How do you verify that your company’s or your customer’s data didn’t end up in one of these places? I suggest that companies adopt a TCO (total cost of ownership) plan that addresses data security for their end-of-life equipment. This plan can use in-house resources or can outsource the process to a qualified vendor. If a company wipes its own drives, I suggest they send some of the drives to a source that can verify if the software they are using is actually wiping the drive. This will give companies assurance that the product they are using to wipe their drives is current with the equipment that they are decommissioning. Even if you wipe a drive to a Department of Defense specification, it is technically possible for a highly trained person with some very expensive and sophisticated equipment to retrieve data. If you have to destroy your drives because of serious information exposure, you need to degauss and shred the drives. Degaussing is a process of destroying the magnetic field around the disks of the drive. This equipment is expensive and requires a trained person to verify destruction. If you are shredding the drives, particle size is very important. The residual particles need to be small enough so data cannot be extracted from them. For the most part, wiping the drive with the proper software and implementing a verification program will work for most storage users. If a company outsources the drive wipe process, thet vendor should be selected with care. Do an RFI (request for information), get a price quote for the service, ask for references and always visit the vendor’s facility. Good vendors will fully explain their process so that it is easy to understand how it works. Addressing security concerns as part of your company’s business plan will protect your company from possible embarrassment, and legal exposure. Author Michael Magliaro is with Lifecycle Business Partners LLC, a Salem, N.H.-based company that provides asset management and recovery services for IT and other electronic equipment. He can be contacted via e-mail at mmagliaro@lifecyclepartners.com. |
A computer hard drive contains a circuit board, as does virtually anything electronic today. Be sure to take every safety precaution with your employees and customers by implementing strict environmental and safety policies, as well as documenting and auditing them.
3. Understand that in any electronics recycling or destruction process there will be residual waste.
Shredding electronics will result in residual waste that must be disposed of properly. Unless you go into the equipment destruction business on a very high-volume basis, the residual material will have little to no resale value.
Make sure that you have qualified, permitted materials processing facilities to handle the residual waste properly. Review their permits and insurance. At no point should you ever send electronics material (shredded or in whole form) to a landfill.
This is a violation of two specific Federal laws. The Resource Conservation and Recovery Act (RCRA), commonly referred to and pronounced as "rickra," [42 U.S.C. s/s 6901 et seq. (1976)] specifically bans hazardous waste from landfills. Lead has been recognized as hazardous waste by the U.S. EPA for quite some time. This is because lead exhibits the characteristic of toxicity as determined by the Toxicity Characteristic Leaching Procedure (TCLP) test.
CRTs from color monitors and color televisions consistently exceed the regulatory limit for lead when tested using the TCLP.
In light of their weight and size, CRTs comprise a significant portion of the overall monitor or television and will cause the entire unit to be considered hazardous waste. It should be assumed that non-residential color monitors and color TVs destined for disposal are hazardous waste unless the generator has tested their equipment to show that it is not hazardous or has other supporting data from the manufacturer.
The second law violated when significant shredded electronics are landfilled is the Emergency Planning & Community Right-To-Know Act (EPCRA), which can be found in EPA’s SARA Title III regulations.
Specifically, some companies that have more than 10 full-time employees and dispose of more than 100 pounds of toxic chemicals (lead, in this case) are required to report an inventory of the material that was released.
Finally we get to the very scary prospect of being named in a Superfund clean-up action. Should your trash hauler be named as a defendant in a Superfund clean up, its attorney will naturally look for customers to share in the substantial clean-up costs. They will look to the most likely sources of the contaminants, sources called "Potentially Responsible Parties," or PRPs.
Once named as a PRP, it is extremely difficult and expensive for a company to defend itself. Having routinely disposed of electronic equipment could make a company a likely PRP in any Superfund litigation.
4. Ensure complete chain of custody on all equipment removed.
A wide array of electronic equipment today contains some kind of hard drive or other data storage device. These devices contain data; some important, private, or sensitive; some obsolete, embarrassing or insignificant. Once the equipment is removed from the customer site, the protection of the data becomes your responsibility. It is very easy for someone to pick up a hard drive, laptop, PDA or other device while you are loading the truck or talking with your customer. Well-written policies that are routinely audited will keep devices from being stolen or "disappearing."
5. Have certified, background-checked and competent computer professionals on staff and implement a strong quality control program.
The world of technology moves at a staggering pace. What is advanced today is obsolete tomorrow. New methodologies for recovering data or hacking systems routinely crop up. Having professionals on staff that are certified in their area of expertise by industry recognized organizations will keep your company on the cutting edge of electronic data destruction.
When doing digital data destruction of any type of media specifically for the purpose of reselling or reusing the media (hard drives, tapes, CD-RWs, etc.), make sure that you have a well-designed quality control process in place.
Attempt data recovery on appropriate random samples of media to validate the reliability of your data destruction process. Have absolute policies in place for physical destruction of any media that fails quality control or that fails to properly complete the wiping process.
Our company, Reclamere, is an electronics recycler. We also provide certified data destruction services for our customers by digitally destroying data on computers or by physically destroying devices upon which data reside. This is a relatively new service in information destruction; however it closely parallels paper shredding in many ways.
Disposal and recycling should not be confused with certified data destruction. Like paper shredding, it is important that the vendor has sufficient insurance and can demonstrate clear chains of custody leading up to destruction.
Therefore, it is imperative that extreme caution be used when dealing with electronics destruction. Like any new business venture or service offering, proper planning and due diligence will increase the likelihood of success and mitigate potential problems.
If the idea of working in the area of electronics recycling is something you are entertaining, consider partnering with an existing electronics recycler. The company should be insured, permitted and operate to the same high standards your company has set forth. Often, partnering with an existing reputable company is the best way to see if the market potential exists in your region to support the endeavor as a stand-alone business model. n
The author is co-founder and vice president of technology and logistics for Reclamere Inc., a Tryone, Pa.-based electronics recycler that specializes in certified destruction of digital data. She can be contacted at angie@reclamere.com.
Get curated news on YOUR industry.
Enter your email to receive our newsletters.

Explore the August 2004 Issue
Check out more from this issue and find your next story to read.
Latest from Recycling Today
- Buy Scrap Software to showcase its software at Scrap Expo in September
- LG details recycling activities
- Algoma EAF is up and running
- Toyota-Tsusho completes acquisition of Radius Recycling
- CATL, Ellen MacArthur Foundation aim to accelerate circular battery economy
- Commentary: Expanded polystyrene is 98 percent air, 2 percent plastic and 100 percent misunderstood
- AMCS appoints general manager for North America
- How tariffs, regulations affect LIBs recycling in US, EU