Secure collecting, data erasure and upgrades of IT equipment
Procurement of a collecting service for equipment having reached the end of life, will maximise reuse and recycling of IT equipment. The service must include collecting and sorting of the equipment, efficient data erasure, resetting and thereafter testing, service and upgrades. Any reuse or disposal must be performed with the purpose of recycling resources.
- Special contract terms
- Services for reuse and recycling of computers and monitors
At the time set by the contracting authority, the supplier shall provide a reuse and recycling service for worn-out IT equipment, at the least comprising:
- Confidential handling, including de-identification of equipment
- Secure data erasure, (if not performed internally by the contracting authority)
- Functional testing, service, and upgrade
- Secure that the equipment is reused to the maximum possible extent
- Secure the recycling of disposed equipment
On request from the contracting authority, the supplier shall account the compliance to the terms in writing, and provide proof of the provided information.
- Request a written account of the above.
- Controlling the manner in which the tenderer manages confidential handling and secure data management can, for example, be performed through requesting an ISO 27001 certification or other documentation proving that the company manages equipment in a secure manner.
- Controls of de-identification can be performed through checking that all markings are removed from the units, and thus cannot be traced to previous users.
- Erasure certification, i.e. certification of erasure or destruction of data on information carriers and backup tapes must be performed on the serial number level.
Information about the criterion
The Waste Electrical and Electronic Equipment Directive (WEEE) applies to suppliers of recycling services as well. For operators in EU a valid permit is required, issued by the competent national authority, under article 23 in Directive 2008/98/EG, or third-party certification in accordance with the technical requirements in EN 50625-1. Operators outside EU must have a third-party certification in accordance with the minimum requirement concerning WEEE waste in the criterion, the technical requirements in EN 50625-1, or other well-established program for ensuring compliance.
The version date indicates when the sustainability criterion was created or last updated. Last reviewed dated tells when we last checked that the sustainability criterion still is relevant.
- Current ID
- Version date