Secure IT Disposal for Solicitors and Legal Practices
A retired laptop in a solicitors’ practice does not stop holding client files when it is switched off. Conveyancing, probate, family and litigation matters sit on those devices, and the duty of confidentiality does not expire when the retainer does. Surplex UK Limited collects across England, Wales and Scotland, with no minimum quantity, and evidences the destruction of every device against its serial number.
What this means for a practice
Most collections are free
Surplex UK Limited works on an open-book value-offset model with no minimum quantity. The value recovered from retired equipment is set against the cost of collection, data destruction and recycling, and you are shown both figures. Most customers find their collection is free on that arithmetic. Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront.
Confidentiality that survives the retainer
Under paragraph 6.3 of the SRA Code of Conduct for Solicitors, you keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents. The code sets no time limit, so a device holding closed matter files carries the same duty as one in daily use. Every device we collect is destroyed and certified individually, so the obligation is evidenced rather than assumed.
One supplier, no subcontractors
Collection, data destruction, recycling and reporting are all performed by Surplex UK Limited. Nothing is passed to a third party, which matters when the duty you owe your clients cannot be delegated.
Evidence for your COLP and your insurer
Every device is recorded against its serial number and issued a certificate of destruction. That is what a compliance officer, a professional indemnity insurer or an SRA enquiry asks to see, and it is available in your portal rather than requested by email months later.
Compliance we can prove, not just promise
Every collection comes with a complete, audit-ready paper trail – certificates of data destruction, serial-level reporting, WEEE evidence notes and ESG data, all available in your portal. Our secure facilities include a BS EN 1143-1 rated strong room, and data is destroyed to NIST 800-88 standards. We’re ISO 14001 certified, ICO registered, an Environment Agency licensed waste carrier, and JOSCAR & FSQS registered.
The obligations that apply to a legal practice
The duty comes from the SRA Code of Conduct and from UK GDPR, and it applies to the hardware as much as to the file room. Legal professional privilege attaches to material on the device, and a practice remains the data controller for client personal data after the equipment leaves the building. Retention policies decide when a matter file can go; they do not decide whether the disposal has to be evidenced.
Certified destruction to recognised standards
Hard drives and solid-state media are shredded mechanically, the Destroy method defined by NIST 800-88, and destruction is carried out to BS EN 15713:2023. Where value is recovered from hardware, data is erased with Certus certified software to the same standard’s Purge method. The difference between the standards is explained here.
Registered with the Information Commissioner’s Office
Registration number Z9955515, held since 2007. You remain the data controller, and a registered processor is the minimum any audit will expect to see documented.
BS 7858 vetted collection teams
Collection and technical staff are screened to BS 7858, the British standard for vetting people working in secure environments. Where a site requires further checks, including DBS-checked personnel, those are arranged and agreed before the visit.
Environment Agency licensed, zero to landfill
Licensed waste carrier including hazardous waste, certified to ISO 14001:2015, and operating a T11 exemption at our Gloucester processing centre under reference EXP/HP3641YX. Every collection produces WEEE evidence notes and carbon data.
Working with organisations of every size
Surplex UK Limited works with sole practitioners and single-site businesses through to multi-site enterprises, alongside schools, colleges, NHS trusts and local councils. There is no minimum quantity and no estate too small to book.
What we typically collect
Frequently asked questions
Indefinitely. Paragraph 6.3 of the SRA Code of Conduct for Solicitors requires you to keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents. The code sets no time limit, so a laptop holding closed matter files carries the same duty as one in daily use. That is why each device is destroyed and certified individually rather than by the load.
A certificate of destruction against each device serial number, plus time-stamped chain-of-custody records and WEEE evidence notes. A compliance officer or a professional indemnity insurer asking what happened to a specific machine gets a specific answer, which a bulk disposal note cannot give.
Yes. There is no minimum quantity, so a sole practitioner retiring two laptops is booked the same way as a multi-office firm consolidating. Collections run across England, Wales and Scotland.
Most customers find their collection is free. Surplex UK Limited works on an open-book value-offset model with no minimum quantity, so the value recovered from your retired hardware is set against the cost of collection, data destruction and recycling, and you are shown both figures. Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront.
Talk to us about your IT estate
Tell us what you are retiring and we will scope the collection, the destruction method and the certification your compliance officer needs.
