A retired laptop can hold attorney-client communications, litigation strategy, discovery materials, and credentials. Recycling it without a data-handling plan creates a confidentiality risk.
IT asset disposition for law firms (ITAD) is the controlled process of identifying, securing, sanitizing, documenting, and responsibly retiring electronic equipment. Houston practices need confidentiality safeguards, retention reviews, and a verifiable custody trail.
Why Law Firms Need a Different ITAD Plan
Retired computers may contain privileged communications alongside confidential client intake notes, settlement discussions, and billing records.
Texas Disciplinary Rule of Professional Conduct 1.05 addresses confidentiality of both privileged and unprivileged client information, including information concerning former clients. Disposal planning deserves the attention of attorneys, IT staff, and records managers.
Unlike ordinary electronics recycling, IT asset dispositionconsiders data protection, equipment tracking, potential reuse, and documented final disposal.
Identify Every Device That May Store Client Data
Begin with an asset inventory. Common devices include:
Lawyer and staff laptops, desktop workstations, and external drives.
File servers, network-attached storage (NAS), backup appliances, and removable media.
Smartphones, tablets, USB drives, and retired conference-room systems.
Multifunction printers, copiers, scanners, and other devices with internal storage.
Record each asset’s serial number, assigned user, and storage media. Separate data-bearing devices from ordinary accessories; broken computers may still contain readable drives.
Check Retention Rules and Legal Holds Before Wiping
Destroying data prematurely can be as damaging as allowing it to escape. Before approving equipment disposal, confirm that required client files, accounting records, and other information have been preserved in approved systems.
Have an attorney or records manager check litigation holds, court orders, client agreements, and retention schedules. Verify that backups are usable.
Texas Bar Practice notes there is no single universal Texas rule governing client-file retention. Review client property and obligations before deleting records, especially information under litigation hold.
Match Data Sanitization to the Media
Data sanitization means making access to target information infeasible for a defined level of effort.
The current National Institute of Standards and Technology guidance is NIST SP 800-88 Revision 2, published in September 2025. It emphasizes a managed sanitization program based on information sensitivity, supported methods, and verification.
For reusable equipment, appropriately selected logical sanitization may preserve resale or donation value. Options include verified device-specific erase functions or cryptographic erasure where appropriate.
Deleting folders or resetting a computer is not enough.
Physical destruction can be appropriate for failed drives, unsupported media, or particularly sensitive devices when policy calls for it.
Hard disk drives (HDDs) and solid-state drives (SSDs) do not necessarily respond identically to wiping methods. Require the provider to explain the method, verification process, and handling of failed sanitization attempts.
Chain of custody records who possessed each asset and when responsibility changed.
Establish controls before equipment leaves the office:
Lock or restrict access to items awaiting collection.
Reconcile the pickup manifest against the asset inventory.
Record collection dates, signatures, transport arrangements, and custody transfers.
Request asset-level sanitization or destruction results, including exceptions.
Reconcile the final report with every data-bearing device collected.
A certificate of data destruction supports the audit trail but cannot replace verification of identifiers, methods, dates, and subcontractors.
What Texas Law and Industry Standards Matter?
Texas Business and Commerce Code Section 72.004 requires covered businesses disposing of customer records containing defined personal identifying information to make that information unreadable or undecipherable, subject to statutory exceptions.
The rule has exceptions; it is not a universal equipment-shredding mandate.
NIST SP 800-88 Rev. 2 is technical guidance, not a law that automatically binds every law firm.
Separately, the U.S. Environmental Protection Agency recommends certified electronics recyclers and identifies R2 and e-Stewards as accredited certification programs.
Verify certifications by facility and activity. Under R2v3, SERI’s Appendix B addresses logical sanitization and enhanced physical sanitization, but it is not required for every form of physical destruction covered under the standard’s core requirements.
Ask for the relevant certification scope rather than accepting a logo as proof of every service.
Choosing a Houston ITAD Provider for a Law Firm
Before hiring a Houston ITAD provider, ask:
Who performs pickup, transportation, sanitization, and final recycling?
Can the provider offer secure transport, controlled access, and documented transfers?
Is on-site destruction available if our risk assessment requires it?
Can we receive device-level records and a clear process for missing assets?
Which facilities are certified, and what work goes to downstream vendors?
Are fees, equipment resale arrangements, and reporting requirements documented?
Put confidentiality duties, incident notifications, and handling of unidentified drives in writing.
Frequently Asked Questions
Can a law firm resell retired laptops?
Potentially. A laptop can be considered for reuse after suitable sanitization and verification, provided retention, contractual, and confidentiality requirements have been addressed.
Is on-site drive destruction always necessary?
No. Some firms prefer it for high-risk media, but secure off-site processing with documented custody and appropriate safeguards may be suitable for other situations.
Should we request proof of destruction?
Yes, where media are destroyed. Ask for records linked to the firm’s inventoried assets and preserve them under its documentation policy.
Plan Your Law Firm’s Next Equipment Retirement
Plan data protection before pickup.
LoneStar e-Waste helps Houston law firms connect with appropriate electronics recycling and ITAD solutions through local recycling partners.
Share your equipment list, estimated quantities, timing, and data-security documentation needs when you request an ITAD quote.
This guide provides general information, not legal advice. Consult qualified counsel about requirements applicable to your law practice.
