In brief
Old business laptops should first be assessed for secure internal reuse, redeployment or credible resale. When continued use is no longer suitable, the organisation should protect data, record custody and use a recovery route that can provide evidence of the actual downstream outcome rather than relying on a vague recycling claim.
Executive takeaway
Do not send every old laptop straight to recycling. First decide whether it remains useful, then protect the data, remove business access, reconcile the asset record and choose a documented reuse, resale, donation or recycling route. A responsible retirement process protects information and may recover value while keeping genuinely reusable equipment in service for longer.
Replacement is only half of a refresh
A laptop refresh feels complete when the new machines arrive, users migrate and the old equipment disappears from their desks.
Operationally, that is only halfway.
The outgoing devices may still contain company documents, cached email, browser sessions, credentials, locally synchronised cloud files and personal information. They also remain physical assets with serial numbers, ownership records and potentially some resale or reuse value.
And eventually, if they no longer have a useful second life, they become electronic waste.
That means the retirement decision should be planned at the same time as the replacement decision—not six months later when someone opens a storeroom and discovers 38 laptops arranged in what appears to be a small aluminium-based archaeological site.
Windows 10 has made this especially relevant. Standard Windows 10 support ended on 14 October 2025, pushing many organisations to decide whether older hardware can move to Windows 11, should receive another controlled use, or needs to leave the active fleet.
The important distinction is that retired from your primary fleet does not automatically mean worthless.
Some equipment can be upgraded. Some can move to a lighter role. Some may have legitimate secondary-market value. Some can be donated after appropriate preparation. Some is genuinely ready for material recovery.
The organisation needs a way to tell the difference.
- Plan outgoing equipment at the same time as replacement equipment.
- Separate “no longer suitable for this user” from “no longer useful”.
- Treat data, asset ownership and environmental routing as separate decisions.
- Do not let retired equipment accumulate indefinitely without an owner or plan.
Start with a four-way lifecycle decision
A practical retirement process starts by putting each device into one of four routes.
Extend
Keep the device in its existing role if it remains secure, supported and capable enough—or improve it economically through memory, storage, battery or maintenance work.
Reassign
Move a capable device to a less demanding role. A laptop that frustrates a developer may still be entirely appropriate for reception, training, a hot desk or another defined use, provided the operating system, security posture and applications remain supported.
Redirect
Move the device outside the organisation through an approved resale, employee-purchase, trade-in or donation route after data sanitisation, account removal and asset-record closure.
Recover
When continued use is no longer sensible, route the equipment into an appropriate electronics recovery or recycling process.
This mirrors the lifecycle logic SpecStack Renew already uses: assess performance, support, security, software compatibility, economics and the employee's role before defaulting to replacement.
The important word is assess.
Age alone is a poor disposal criterion. So is “it still switches on”.
A five-year-old laptop with adequate performance, a healthy battery and current security support may still have a useful role. Another device of the same age may have a swollen battery, damaged chassis, unsupported operating system and a fan that sounds ready for take-off.
Lifecycle decisions work better when condition beats calendar.
- Extend: keep or upgrade equipment that still meets the requirement.
- Reassign: move suitable devices to less demanding roles.
- Redirect: resell, trade in or donate after controlled preparation.
- Recover: responsibly process equipment that has reached genuine end of life.
Deal with the data before the device leaves your control
Deleting the user's files is not a retirement process.
Nor is dragging everything into the Recycle Bin, performing a casual operating-system reset and handing the laptop to someone else with a cheerful “should be fine”.
South Africa's Protection of Personal Information Act requires responsible parties to take appropriate, reasonable technical and organisational measures to protect personal information against loss, unauthorised destruction, unlawful access and unlawful processing. Section 19 also requires foreseeable risks to be identified, safeguards to be maintained and those safeguards to be verified and updated.
That obligation does not disappear because the computer has reached the end of its accounting life.
A useful technical reference is NIST Special Publication 800-88 Revision 2, published in September 2025. Rather than treating sanitisation as a single “wipe this disk” action, the revised guidance emphasises an organisational media-sanitisation programme based on information sensitivity, appropriate methods, validation and documented controls.
For a business retirement process, the practical questions are:
What information could be on this device? What storage media does it contain? What sanitisation method is suitable for that media and level of sensitivity? Who performed it? Was it validated? And where is the evidence?
The correct technique can differ according to storage technology and the intended next use. A device being securely reused may follow a different path from storage media requiring physical destruction.
The policy should define the outcome rather than relying on folklore such as “we overwrite everything seven times because someone once heard the military does that”.
Modern storage deserves modern guidance.
- Do not confuse ordinary file deletion with media sanitisation.
- Select a sanitisation method appropriate to the storage technology and information sensitivity.
- Validate the result rather than assuming the process worked.
- Keep a record linking the sanitisation event to the relevant asset or media.
- Use an approved technical standard or organisational policy rather than improvised wiping methods.
Remove the organisation, not only the files
Data on the drive is only one part of the offboarding process.
Before a device is redirected, check whether it remains associated with device-management platforms, endpoint-security services, Microsoft Entra ID or another identity directory, mobile-device management, remote-support tools, VPN profiles, certificates, licensed applications, hardware inventories or warranty-management portals.
Then reconcile the physical asset.
Record the serial number and asset tag. Confirm the assigned user. Capture its condition. Record what accessories are leaving with it. Update the asset register. Remove it from active management systems where appropriate. Close or transfer any warranty or support record that needs attention.
If a third-party provider will handle devices that may still contain personal information, the organisation should also consider its POPIA responsibilities around operators. Section 21 requires a responsible party to use a written contract to ensure that an operator processing personal information on its behalf establishes and maintains the required security measures.
The goal is a clean break.
Six months later, nobody should be wondering why a decommissioned laptop is still appearing in the endpoint console from somewhere outside the business.
Technology has enough ghosts already.
- Remove devices from relevant management and security platforms.
- Revoke or remove business access, certificates and accounts where applicable.
- Reconcile serial numbers and asset tags.
- Record the new owner or destination.
- Define third-party security and chain-of-custody responsibilities in writing where required.
Reuse and resale can be better than premature recycling
Recycling is important, but it is not always the first environmentally or economically sensible destination for functional equipment.
A usable laptop may be suitable for reassignment within the organisation, sale to employees, trade-in, resale through an appropriate channel or donation to another organisation after secure preparation.
The potential advantage is straightforward: the device continues doing what it was manufactured to do.
That does not mean every donation is automatically responsible. A recipient does not benefit from receiving equipment that is unsupported, unsafe, incomplete, impractical to repair or too weak for its intended use.
A responsible reuse decision should therefore assess condition, battery safety, software compatibility, charger availability, expected remaining useful life and the recipient's actual requirement.
The same discipline applies to resale.
Do not promise residual value before equipment has been assessed. Marketability can vary considerably according to model, age, specification, condition, battery health, ownership restrictions and quantity.
Recent IT-administrator discussions show that organisations are actively debating exactly this question: whether older Windows 10-era machines should be sold internally, redirected to alternate uses, sent to refurbishment channels or recycled. Another recurring theme is the need for reliable sanitisation records and chain of custody before equipment leaves the organisation. These conversations are anecdotal, but they show the operational issue is current.
- Prefer useful life over premature material recovery when reuse remains sensible.
- Assess whether a recipient can genuinely use and support donated equipment.
- Do not guarantee trade-in or resale value without assessment.
- Complete the security and ownership process before equipment changes hands.
When it really is e-waste, use a documented route
Eventually, some equipment reaches the end of useful service.
South Africa has been strengthening the policy framework around waste electrical and electronic equipment. Extended Producer Responsibility regulations cover electrical and electronic equipment, placing end-of-life responsibilities on qualifying producers and creating mechanisms intended to increase collection and appropriate recovery.
In August 2025, government also published the National Policy for the Management of Waste Electrical and Electronic Equipment, adding to the country's formal policy framework for this waste stream.
The Department of Forestry, Fisheries and the Environment stated again in May 2026 that South Africa generates more than 360,000 tonnes of e-waste annually and that e-waste disposal to landfill is prohibited, with policy focused on increasing reuse, recycling and recovery.
For an organisational buyer, this does not mean attempting to become an expert recycler.
It means choosing an appropriate recovery route and asking for evidence.
Depending on the arrangement, useful documentation may include equipment or serial-number schedules, collection records, chain-of-custody documentation, data-sanitisation or destruction evidence, quantities received and records of the eventual recovery outcome.
Environmental language should remain precise.
“Collected” does not automatically mean “recycled”. “Sent for recycling” does not prove a recovery rate. “Zero landfill” should not be stated unless the actual downstream outcome can support it.
If the evidence only proves that 48 laptops were collected, say that 48 laptops were collected.
Green adjectives are much cheaper than audit trails.
- Use an appropriate and documented electronics recovery route.
- Keep collection and asset-level records where practical.
- Distinguish collection, reuse, refurbishment, recycling and destruction.
- Do not make recycling, landfill-diversion or carbon claims without evidence.
- Confirm current regulatory requirements before a major disposal project.
Build retirement into the purchase order next time
The easiest time to improve device retirement is several years before it happens.
When specifying new equipment, consider expected service life, warranty length, repairability, battery replacement, storage design, operating-system support, standard accessories, asset tagging and the likely route after the first user no longer needs the device.
That changes procurement.
A slightly more repairable device may stay useful longer. Standardising chargers can make reassignment easier. Accurate serial-number records make later collection easier. Encryption and device management can simplify secure lifecycle control. A clearly defined refresh policy can prevent usable hardware being forgotten in cupboards until its residual value disappears.
The global scale makes the point. The Global E-waste Monitor reported that 62 billion kilograms of e-waste were generated worldwide in 2022, while only 22.3% was documented as formally collected and recycled in an environmentally sound manner. It projected global generation reaching 82 billion kilograms by 2030 under current trajectories.
A South African organisation cannot solve that problem through one laptop refresh.
It can control its own chain.
For each outgoing asset, be able to answer five questions:
Is it still useful? Is the data safely handled? Who owns it now? Where did it go? What evidence do we have?
If those answers are recorded, the organisation has moved from “disposing of old computers” to managing an ICT lifecycle.
If you have ageing laptops or other ICT equipment approaching retirement, begin with an asset list and condition assessment. SpecStack Renew can then help frame the next decision around extension, refresh, secure retirement and an appropriate recovery path rather than defaulting automatically to replacement.
- Include lifecycle expectations when buying new equipment.
- Maintain useful asset data throughout ownership.
- Review repair and reuse before replacement.
- Make secure retirement a defined business process.
- Require evidence for environmental outcomes.
Questions answered
Frequently asked questions
Should a business erase laptops before recycling them?
Yes. Data handling must be planned before a device leaves the organisation. The required sanitisation or destruction method should reflect the information risk, media type and evidence the organisation needs to retain.
Can old business laptops be reused?
They can be reused when they remain reliable, supported, secure and fit for the next role. Record the reassignment, condition, data-handling step and new custodian.
Evidence
Sources and further reading
- Republic of South Africa — Protection of Personal Information Act 4 of 2013Published 2013-11-26
- NIST — SP 800-88 Revision 2, Guidelines for Media SanitizationPublished 2025-09-26
- Microsoft — Windows 10 end of support
- Department of Forestry, Fisheries and the Environment — Extended Producer Responsibility registration and background
- South African Government — National Policy for the Management of Waste Electrical and Electronic EquipmentPublished 2025-08-29
- Department of Forestry, Fisheries and the Environment — E-Waste Recycling Pilot ProjectPublished 2026-05-20
- ITU and UNITAR — Global E-waste Monitor 2024


