{"id":12936,"date":"2026-10-02T15:14:42","date_gmt":"2026-10-02T14:14:42","guid":{"rendered":"https:\/\/www.second-it.de\/?p=12936"},"modified":"2026-10-02T15:14:42","modified_gmt":"2026-10-02T14:14:42","slug":"dispose-of-data-carrier-dsgvo-compliant","status":"publish","type":"post","link":"https:\/\/www.second-it.de\/en\/blog\/datentraeger-dsgvo-konform-entsorgen\/","title":{"rendered":"Disposing of data carriers in accordance with the GDPR: What really matters in an audit"},"content":{"rendered":"<p>A decommissioned laptop is a depreciated asset for accounting purposes. For the data protection officer, it is a filing cabinet full of personal data. Anyone who wants to dispose of data carriers must reconcile both perspectives. This article shows what obligations the GDPR creates in this context, how an erasure concept helps, and what evidence is really relevant in an audit.<\/p>\n<div class=\"si-tldr\">\n<p><strong>The most important in a nutshell<\/strong><\/p>\n<ul>\n<li>The GDPR does not prescribe a specific procedure, but requires that data be effectively deleted \u2013 and that you can prove this.<\/li>\n<li>If you hire a service provider, you usually need a contract for the processing of orders in accordance with Article 28 of the GDPR.<\/li>\n<li>A deletion concept determines which data carriers are deleted or destroyed when, how and by whom.<\/li>\n<li>Crucial in the audit: Proofs per serial number, a seamless transport chain, and documented disposal.<\/li>\n<\/ul>\n<\/div>\n<h2>Why data media disposal is a data protection issue<\/h2>\n<p>Laptops, PCs, servers, smartphones, printers with built-in hard drives, USB sticks: All these devices store data, often even when they appear to be empty. If such a data carrier falls into the wrong hands, a data privacy breach is quickly imminent. Then there is a risk of reporting obligations, fines, and loss of customer trust.<\/p>\n<p>The GDPR provides for fines of up to 20 million euros or 4 % % of global annual revenue for violations of its principles. The damage to reputation is often even more expensive when customer data appears on a used hard drive that has been sold.<\/p>\n<h2>Which GDPR obligations apply?<\/h2>\n<table class=\"si-table\">\n<thead>\n<tr>\n<th>Requirement<\/th>\n<th>What they demand<\/th>\n<th>What that means for old devices<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Art. 5(1)(e) GDPR (storage limitation)<\/td>\n<td>Only store data for as long as necessary<\/td>\n<td>Discontinued devices are not allowed to \u201etake\u201c any data.<\/td>\n<\/tr>\n<tr>\n<td>Article 5(2) GDPR (Accountability)<\/td>\n<td>Compliance must be verifiable<\/td>\n<td>You need proof for every deletion or destruction.<\/td>\n<\/tr>\n<tr>\n<td>Article 17 GDPR (Right to erasure)<\/td>\n<td>Data must be deleted upon request or upon expiration of the purpose for which it was collected.<\/td>\n<td>Deleted means that it cannot be restored.<\/td>\n<\/tr>\n<tr>\n<td>Article 28 GDPR (Data processing)<\/td>\n<td>Contracts with service providers that process data<\/td>\n<td>Anyone who deletes or destroys your data is processing your data.<\/td>\n<\/tr>\n<tr>\n<td>Article 32 GDPR (Security of Processing)<\/td>\n<td>Appropriate technical and organizational measures<\/td>\n<td>Safe transportation, access control, and verified procedures.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Note: This overview does not replace legal advice. Consult your data protection officer or your data protection officer regarding your actions.<\/p>\n<h2>The extinguishing concept: order instead of individual case decisions<\/h2>\n<p>Many companies decide anew what happens to their old devices when they replace hardware. This takes time and leads to gaps. A deletion concept creates a fixed rule. The DIN 66398, the guideline for developing a deletion concept, and the CON.6 \u201eDelete and Destroy\u201c component from the IT Basic Protection of the BSI often serve as a reference.<\/p>\n<p>A practical extinguishing concept for hardware answers at least these questions:<\/p>\n<ul>\n<li><strong>What data carriers are there?<\/strong> Hard drives, SSDs, smartphones, memory cards, tapes, printer memory.<\/li>\n<li><strong>What protection is required?<\/strong> Normal, high or very high \u2013 based on the protection classes of DIN 66399.<\/li>\n<li><strong>Which procedure?<\/strong> Certify deletion, physically destroy, or both.<\/li>\n<li><strong>Who is responsible?<\/strong> Who releases equipment, who collects it, who verifies the proofs?<\/li>\n<li><strong>How is it documented?<\/strong> What evidence is kept for how long?<\/li>\n<li><strong>What happens in the case of exceptions?<\/strong> For example, with defective data carriers or devices from leasing contracts.<\/li>\n<\/ul>\n<blockquote class=\"si-callout\">\n<p>Key point: The GDPR does not ask whether you have deleted it. It asks whether you can prove it.<\/p>\n<\/blockquote>\n<h2>The four weaknesses in practice<\/h2>\n<h3>1. The Collection Area<\/h3>\n<p>Old equipment ends up in the basement, the server room, or a storage room \u2013 often for months. Who has access there? Who knows how many devices are there? A list of serial numbers is the first step in the control process.<\/p>\n<h3>2. The transport<\/h3>\n<p>The most dangerous stretch lies between your building and the disposal point. Unlocked boxes, intermediate storage at freight forwarders or transshipments increase the risk. Direct trips with loaded cargo and tracking are safer.<\/p>\n<h3>3. The forgotten data carriers<\/h3>\n<p>The USB stick in the docking station, the second hard drive in the server, the memory card in the camera bag, the hard drive in the multifunctional printer\u2014such media are all included in a mere count of devices.<\/p>\n<h3>4. The lack of proof<\/h3>\n<p>An invoice for \u201eDisposal of 1 Grid Box IT\u201c is not proof of recovery. In an audit, you need a receipt for every data carrier detailing what happened to it.<\/p>\n<h2>The checklist for GDPR-compliant disposal<\/h2>\n<div class=\"si-steps\">\n<ol>\n<li><strong>Create inventory:<\/strong> Record devices by type, manufacturer and serial number. A simple table is sufficient for getting started.<\/li>\n<li><strong>Service providers check:<\/strong> Certificates (for example ISO\/IEC 27001, DIN 66399, waste management company), place of processing, use of subcontractors.<\/li>\n<li><strong>Signing a contract for order processing:<\/strong> With a description of the technical and organizational measures.<\/li>\n<li><strong>Organizing secure delivery:<\/strong> Plumbed containers, delivery protocol, direct transport.<\/li>\n<li><strong>Delete or destroy:<\/strong> Certified deletion of functioning data carriers, destruction of defective ones in accordance with DIN 66399.<\/li>\n<li><strong>Compare evidence:<\/strong> Do the serial numbers on the certificates match your inventory list?<\/li>\n<li><strong>Documenting disposal:<\/strong> Anything that cannot be reused must be properly recycled and evidence submitted.<\/li>\n<\/ol>\n<\/div>\n<h2>Disposing of waste does not automatically mean burying it.<\/h2>\n<p>Many companies equate \u201eDSGVO-compliant disposal\u201c with \u201eshredding everything.\u201c That is certainly possible, but it is expensive and not very sustainable. Functional devices that have been certified as deleted no longer contain data. They can be prepared and resold. The proceeds flow back to your company.<\/p>\n<p>A sensible sequence therefore separates:<\/p>\n<ul>\n<li><strong>Devices with market value:<\/strong> certified to be deleted, prepared for reuse, and re-marketed.<\/li>\n<li><strong>Defective data carriers:<\/strong> destroy according to DIN 66399, with certificate.<\/li>\n<li><strong>Devices without a market value:<\/strong> dispose of it properly according to the circular economy law, with a waste disposal certificate.<\/li>\n<\/ul>\n<h2>How Second IT fulfills its obligation to provide proof<\/h2>\n<p>Since 2011, Second IT in Schw\u00e4bisch Hall has been processing decommissioned IT equipment \u2013 currently around 1.8 million devices. For data protection officers, these points are particularly important:<\/p>\n<ul>\n<li><strong>Own security logistics:<\/strong> Direct shipments without intermediate storage, GPS tracking, tamper-proof packaging, insured transport. For smaller quantities, there are tamper-proof PELI cases and trolleys.<\/li>\n<li><strong>Recording by serial number:<\/strong> Each device and data carrier is registered. You can track the status in the customer portal.<\/li>\n<li><strong>Certified deletion:<\/strong> With Blancco, including hidden areas, and with a digitally signed deletion certificate per device.<\/li>\n<li><strong>Destruction in one's own home:<\/strong> According to DIN 66399, safety level H-5, video-monitored and with destruction certificate.<\/li>\n<li><strong>Protected area:<\/strong> Access control with biometric systems, video surveillance, employees bound by data secrecy.<\/li>\n<li><strong>Anonymization:<\/strong> Inventory stickers and other signs that identify your business will be removed.<\/li>\n<li><strong>Certified management systems:<\/strong> ISO 9001, ISO 14001, ISO 45001 and ISO\/IEC 27001, as well as a waste disposal company in accordance with \u00a7 56 KrWG.<\/li>\n<\/ul>\n<p>More about it on the pages <a href=\"https:\/\/www.second-it.de\/en\/services\/data-security\/\">Data security<\/a>, <a href=\"https:\/\/www.second-it.de\/en\/services\/disposal\/\">Waste disposal<\/a> and <a href=\"https:\/\/www.second-it.de\/en\/certificates\/\">Certificates<\/a>. How to sell used laptops in a data protection-compliant manner can be read in our article. <a href=\"https:\/\/www.second-it.de\/en\/blog\/sell-used-laptops-old-smartphones-securely-and-in-compliance-with-data-protection-regulations\/\">Selling used laptops and smartphones<\/a>.<\/p>\n<h2>Special case: printers, copiers and network devices<\/h2>\n<p>When disposing of data media, most people think of laptops and servers. But other devices also store data:<\/p>\n<ul>\n<li><strong>Multifunctional printer and copier<\/strong> They often have a built-in hard drive or flash memory on which scanned and printed documents are stored in between.<\/li>\n<li><strong>Routers, Switches and Firewalls<\/strong> contains configurations, access data, and logs.<\/li>\n<li><strong>Thin Clients and Point-of-Sale Systems<\/strong> have small internal storage that is often overlooked during inventory checks.<\/li>\n<li><strong>Cameras, dictation devices and memory cards<\/strong> They often end up in bins instead of the waste disposal process.<\/li>\n<\/ul>\n<p>Explicitly include these device classes in your disposal plan. For leased printers, it\u2019s worth taking a look at the contract: Who is responsible for deleting the internal memory, and what proof is provided?<\/p>\n<section class=\"si-faq\">\n<h2>Frequently asked questions about data media disposal<\/h2>\n<details>\n<summary>How do I dispose of data carriers in accordance with the GDPR?<\/summary>\n<p>They ensure that the data cannot be recovered and document this for each data carrier. Functional data carriers are deleted using certified software, defective ones are destroyed in accordance with DIN 66399. If a service provider takes on this task, you enter into a contract for order processing. Keep the deletion and destruction certificates with serial numbers.<\/p>\n<\/details>\n<details>\n<summary>Do I need an AV contract for data destruction?<\/summary>\n<p>As a rule, yes. A service provider who deletes or destroys your data has access to personal data and processes them on your behalf. Therefore, a contract in accordance with Art. 28 GDPR is customary. It regulates, among other things, the technical and organizational measures and the handling of subcontractors. Please clarify details with your data protection officer.<\/p>\n<\/details>\n<details>\n<summary>What should be included in a hardware disposal plan?<\/summary>\n<p>A deletion plan describes which data carriers exist, what protection the data require, and which procedure is used. It defines responsibilities and regulates documentation. Special cases such as defective devices or lease returns should also be included. The DIN 66398 and the BSI component CON.6 serve as guidelines.<\/p>\n<\/details>\n<details>\n<summary>How long should I keep proof of destruction and removal?<\/summary>\n<p>There is no uniform legal deadline specifically for destruction certificates. Many companies follow their general retention periods and the requirements of their audits. It is important that you can quickly and fully provide the evidence during an audit. Define the deadline in your destruction plan.<\/p>\n<\/details>\n<details>\n<summary>Can I simply bring old company laptops to the recycling center?<\/summary>\n<p>This should be avoided. The data on the devices remain on them while you are on your way to recycling. Furthermore, you have no proof that they have been deleted. Commercial waste appliances are also subject to their own return and disposal regulations. A safer way is to use a certified service provider that deletes, recycles, and documents the process.<\/p>\n<\/details>\n<\/section>\n<div class=\"si-cta\">\n<p><strong>Disposal with complete traceability \u2013 from collection to the certificate.<\/strong><\/p>\n<p>Send us your list of devices. We will check what can be sold and create a quote within an average of 48 hours.<\/p>\n<p><a href=\"https:\/\/www.second-it.de\/en\/contact\/\">Send device list<\/a> <a href=\"https:\/\/www.second-it.de\/en\/\">Request for offer<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Which GDPR obligations apply to the disposal of hard drives and laptops, how an erasure plan helps, and what evidence is required in the audit.<\/p>","protected":false},"author":2,"featured_media":12926,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-12936","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Datentr\u00e4ger entsorgen nach DSGVO: Checkliste<\/title>\n<meta name=\"description\" content=\"Datentr\u00e4ger entsorgen nach DSGVO: Pflichten aus Art. 5, 17, 28 und 32, L\u00f6schkonzept, AV-Vertrag und Nachweise je Seriennummer \u2013 mit Checkliste.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.second-it.de\/en\/blog\/dispose-of-data-carrier-dsgvo-compliant\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Datentr\u00e4ger entsorgen nach DSGVO: Checkliste\" \/>\n<meta property=\"og:description\" content=\"Datentr\u00e4ger entsorgen nach DSGVO: Pflichten aus Art. 5, 17, 28 und 32, L\u00f6schkonzept, AV-Vertrag und Nachweise je Seriennummer \u2013 mit Checkliste.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.second-it.de\/en\/blog\/dispose-of-data-carrier-dsgvo-compliant\/\" \/>\n<meta property=\"og:site_name\" content=\"Second IT Remarketing\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-02T14:14:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Arash Ekhlasi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Arash Ekhlasi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/\"},\"author\":{\"name\":\"Arash Ekhlasi\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#\\\/schema\\\/person\\\/cd5e1374fd1e7628d89a2c9ed8295aa3\"},\"headline\":\"Datentr\u00e4ger entsorgen nach DSGVO: Was im Audit wirklich z\u00e4hlt\",\"datePublished\":\"2026-10-02T14:14:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/\"},\"wordCount\":1481,\"publisher\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/\",\"url\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/\",\"name\":\"Datentr\u00e4ger entsorgen nach DSGVO: Checkliste\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg\",\"datePublished\":\"2026-10-02T14:14:42+00:00\",\"description\":\"Datentr\u00e4ger entsorgen nach DSGVO: Pflichten aus Art. 5, 17, 28 und 32, L\u00f6schkonzept, AV-Vertrag und Nachweise je Seriennummer \u2013 mit Checkliste.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg\",\"contentUrl\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg\",\"width\":1920,\"height\":1080,\"caption\":\"DSGVO-konform entsorgen hei\u00dft: verschlossen \u00fcbergeben, nachweisbar l\u00f6schen oder vernichten, jede Seriennummer dokumentieren.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/blog\\\/datentraeger-dsgvo-konform-entsorgen\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.second-it.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Datentr\u00e4ger entsorgen nach DSGVO: Was im Audit wirklich z\u00e4hlt\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#website\",\"url\":\"https:\\\/\\\/www.second-it.de\\\/\",\"name\":\"www.second-it.de\",\"description\":\"IT-Ankauf, Refurbishing und DSGVO-konforme Datenl\u00f6schung.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.second-it.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#organization\",\"name\":\"Second IT Store GmbH\",\"url\":\"https:\\\/\\\/www.second-it.de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/secondit-logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.second-it.de\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/secondit-logo.svg\",\"width\":212,\"height\":24,\"caption\":\"Second IT Store GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.second-it.de\\\/#\\\/schema\\\/person\\\/cd5e1374fd1e7628d89a2c9ed8295aa3\",\"name\":\"Arash Ekhlasi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g\",\"caption\":\"Arash Ekhlasi\"},\"sameAs\":[\"https:\\\/\\\/www.cubemedia.de\"],\"url\":\"https:\\\/\\\/www.second-it.de\\\/en\\\/blog\\\/author\\\/cubemedia\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Disposing of data media in accordance with the GDPR: Checklist","description":"Dispose of data carriers in accordance with the GDPR: obligations under Articles 5, 17, 28 and 32, deletion plan, AV contract and documentation per serial number \u2013 with checklist.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.second-it.de\/en\/blog\/dispose-of-data-carrier-dsgvo-compliant\/","og_locale":"en_US","og_type":"article","og_title":"Datentr\u00e4ger entsorgen nach DSGVO: Checkliste","og_description":"Datentr\u00e4ger entsorgen nach DSGVO: Pflichten aus Art. 5, 17, 28 und 32, L\u00f6schkonzept, AV-Vertrag und Nachweise je Seriennummer \u2013 mit Checkliste.","og_url":"https:\/\/www.second-it.de\/en\/blog\/dispose-of-data-carrier-dsgvo-compliant\/","og_site_name":"Second IT Remarketing","article_published_time":"2026-10-02T14:14:42+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","type":"image\/jpeg"}],"author":"Arash Ekhlasi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Arash Ekhlasi","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#article","isPartOf":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/"},"author":{"name":"Arash Ekhlasi","@id":"https:\/\/www.second-it.de\/#\/schema\/person\/cd5e1374fd1e7628d89a2c9ed8295aa3"},"headline":"Datentr\u00e4ger entsorgen nach DSGVO: Was im Audit wirklich z\u00e4hlt","datePublished":"2026-10-02T14:14:42+00:00","mainEntityOfPage":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/"},"wordCount":1481,"publisher":{"@id":"https:\/\/www.second-it.de\/#organization"},"image":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#primaryimage"},"thumbnailUrl":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/","url":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/","name":"Disposing of data media in accordance with the GDPR: Checklist","isPartOf":{"@id":"https:\/\/www.second-it.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#primaryimage"},"image":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#primaryimage"},"thumbnailUrl":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","datePublished":"2026-10-02T14:14:42+00:00","description":"Dispose of data carriers in accordance with the GDPR: obligations under Articles 5, 17, 28 and 32, deletion plan, AV contract and documentation per serial number \u2013 with checklist.","breadcrumb":{"@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#primaryimage","url":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","contentUrl":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","width":1920,"height":1080,"caption":"DSGVO-konform entsorgen hei\u00dft: verschlossen \u00fcbergeben, nachweisbar l\u00f6schen oder vernichten, jede Seriennummer dokumentieren."},{"@type":"BreadcrumbList","@id":"https:\/\/www.second-it.de\/blog\/datentraeger-dsgvo-konform-entsorgen\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.second-it.de\/"},{"@type":"ListItem","position":2,"name":"Datentr\u00e4ger entsorgen nach DSGVO: Was im Audit wirklich z\u00e4hlt"}]},{"@type":"WebSite","@id":"https:\/\/www.second-it.de\/#website","url":"https:\/\/www.second-it.de\/","name":"www.second-it.de","description":"IT purchase, refurbishing and GDPR-compliant data erasure.","publisher":{"@id":"https:\/\/www.second-it.de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.second-it.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.second-it.de\/#organization","name":"Second IT Store GmbH","url":"https:\/\/www.second-it.de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.second-it.de\/#\/schema\/logo\/image\/","url":"https:\/\/www.second-it.de\/wp-content\/uploads\/2024\/07\/secondit-logo.svg","contentUrl":"https:\/\/www.second-it.de\/wp-content\/uploads\/2024\/07\/secondit-logo.svg","width":212,"height":24,"caption":"Second IT Store GmbH"},"image":{"@id":"https:\/\/www.second-it.de\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.second-it.de\/#\/schema\/person\/cd5e1374fd1e7628d89a2c9ed8295aa3","name":"Arash Ekhlasi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/68ea88e0b026eb113aa171cc6041b41efc01017df641aa90420140291a08675d?s=96&d=mm&r=g","caption":"Arash Ekhlasi"},"sameAs":["https:\/\/www.cubemedia.de"],"url":"https:\/\/www.second-it.de\/en\/blog\/author\/cubemedia\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/www.second-it.de\/wp-content\/uploads\/2026\/10\/datentraeger-dsgvo-konform-entsorgen-sicherheitsbehaelter.jpg","_links":{"self":[{"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/posts\/12936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/comments?post=12936"}],"version-history":[{"count":2,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/posts\/12936\/revisions"}],"predecessor-version":[{"id":12957,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/posts\/12936\/revisions\/12957"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/media\/12926"}],"wp:attachment":[{"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/media?parent=12936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/categories?post=12936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.second-it.de\/en\/wp-json\/wp\/v2\/tags?post=12936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}