When a computer leaves the company, it takes everything stored on its drive: spreadsheets, emails, customer records, saved passwords. Deleting files or formatting the drive is not enough — with the right tools, much of the data can be recovered.
What the LGPD says
Brazil's General Data Protection Law (Law 13,709/2018) requires, in article 46, that data-processing agents adopt technical and administrative security measures to protect personal data from unauthorised access and from accidental or unlawful situations. This applies throughout the information life cycle — including when equipment is sold or disposed of.
Sanitisation: deleting for real
Sanitising means making the data unrecoverable. The most common methods are:
- Overwriting the entire drive, when the equipment will be reused.
- Cryptographic erase or the SSD's own secure-erase commands.
- Physical destruction of the media, when it will not be reused.
The result should be documented in a sanitisation report identifying the equipment and the procedure applied.
Disposal report: the right destination
The disposal report, in turn, proves the environmentally sound destination of the waste — whatever cannot be reused goes to recycling by licensed companies. This helps comply with Brazil's National Solid Waste Policy and answer compliance and ESG audits.
Always ask for both documents: sanitisation protects the data; the disposal report protects the environment and the company's reputation.
How we work
When buying equipment, Circula Tech issues solid-waste and drive-sanitisation reports. Our partners run an Environmental Management System and hold the required licences — such as CADRI, IBAMA registration and ISO 14001 certification — ensuring security throughout the process.
Quick checklist
- Inventory with the equipment serial numbers
- Sanitisation report per device or per batch
- Disposal report for the items not reused
- Proof of the partner's environmental licences
