ITAD stands for IT Asset Disposal — the process of decommissioning, sanitising, and disposing of end-of-life IT equipment in a way that protects data, meets regulatory requirements, and handles hardware responsibly. For most businesses, ITAD only becomes a priority when something goes wrong. Here’s what you need to know before that happens.
What ITAD Covers
A proper ITAD process encompasses several stages that are often handled separately but should be managed as a single chain of custody:
- Asset inventory — cataloguing every device by make, model, and serial number before disposal begins
- Data sanitisation — erasing drives to a recognised standard that makes data unrecoverable
- Verification — confirming the erasure was successful through a read-back check
- Documentation — issuing certificates of erasure and maintaining records for compliance
- Physical disposal — recycling hardware through accredited e-waste processors, not general waste
Why ITAD Matters Under Australian Law
Two pieces of legislation make ITAD a compliance issue rather than just a best practice for Australian businesses:
Privacy Act 1988 (Cth) — requires organisations to take reasonable steps to destroy or permanently de-identify personal information when it is no longer needed. The 2022 amendments significantly increased penalties for serious breaches, with fines up to $50 million for corporations.
NSW e-waste legislation — NSW banned e-waste from general household and commercial waste in 2022. Businesses that send IT equipment to landfill are in breach of the Protection of the Environment Operations Act. Hardware must go to accredited e-waste recyclers.
The Most Common ITAD Mistakes
- Using Windows “Reset this PC” or macOS Erase as the only data destruction step
- Donating or selling hardware without verifying drives have been properly wiped
- Treating ITAD as a one-off event rather than a scheduled process tied to hardware refresh cycles
- Not keeping records of what was wiped, when, and to what standard
- Using HDD overwrite tools on SSDs, which are largely ineffective due to how SSDs manage writes
What a Good ITAD Provider Does
When evaluating an ITAD provider, look for:
- Support for recognised erasure standards (DoD 5220.22-M, NIST 800-88, Australian ISM-6.2.93)
- Separate handling for HDDs and SSDs — proper SSD erasure uses firmware-level Secure Erase, not overwrite tools
- Per-asset certificates of erasure tied to serial numbers
- A documented chain of custody from collection through to destruction
- Partnership with accredited NSW e-waste recyclers for physical disposal
Kinsoft provides end-to-end ITAD services for Sydney businesses — from collection and erasure to certification and recycling. We support 21 international erasure standards and issue per-device certificates of erasure. Learn more about our e-waste removal service.