Do the Australian Privacy Principles (APP 11) require secure destruction of old company laptops?
Short answer: Yes, in effect — APP 11 requires organisations covered by the Privacy Act to take reasonable steps to destroy or de-identify personal information once it's no longer needed, and for information stored on a laptop's hard drive, this generally means secure data destruction rather than simply discarding or reselling the device with data still recoverable on it.
Skip the phone calls. List your business laptops once and let verified ITAD-experienced buyers on ScrapTrade come to you.
List Free →What APP 11 actually requires
Australian Privacy Principle 11 requires entities to take reasonable steps to protect personal information from misuse, and to destroy or de-identify it once it’s no longer needed for any purpose it was collected for — this applies regardless of what physical medium the data sits on.
Why this covers old laptops directly
A laptop’s hard drive holding customer or employee personal information falls squarely within this requirement — simply disposing of the device without properly destroying that data doesn’t meet the “reasonable steps” standard.
What “reasonable steps” looks like in practice
Documented, verified data destruction — not just deletion — combined with a record of when and how it was done, is generally what regulators and courts would expect to see as evidence of taking this obligation seriously.
How ScrapTrade Makes This Easier
ScrapTrade connects you with buyers who understand this compliance context, rather than treating your business laptops the same as a casual household device.
Ready to dispose of business IT equipment without compliance guesswork? ScrapTrade connects verified buyers and sellers with escrow-protected payments and transparent weighing.
List or Find Equipment on ScrapTrade →