The supplier must no later than x (to be filled in by the procuring organization) monthsprovide a reuse and recycling service for collecting/taking back end-of-life equipment and that includes at least the following:
-
Collection
-
Confidential handling, including de-identification of the equipment
-
Secure data deletion (of this is not carried out internally by the contracting organisation). Secure data deletion can be done in accordance with NIST 800-88 or an equivalent standard. Physical data deletion can be done according to DIN 66399 (H5 and E5) in the event of hardware failure that makes it impossible to delete data using software
-
Operational testing, servicing and upgrades
-
An offer to upgrade the equipment
Upon the request of the contracting organisation, the supplier shall outline in writing how it complies with the contract term, and it shall be able to substantiate the information provided.
