A HIPAA auditor does not accept a recycling receipt. A Florida Bar disciplinary reviewer does not accept ‘we gave the old laptops to a recycler.’ A FERPA compliance officer does not accept ‘the drives were formatted before disposal.’ Every regulated industry in Florida requires documented, verifiable, device-level evidence that data on retired equipment was destroyed under recognized standards. That evidence is a serialized certificate of destruction. And most recyclers do not provide one.
Excess IT Hardware provides compliance-grade electronics recycling built specifically for healthcare, legal, and education organizations across Florida. Every device enters a serialized chain of custody. Every drive is destroyed under NIST 800-88 standards. A serialized certificate of destruction documenting every device by serial number lands in your compliance file within 24 hours. Business Associate Agreements available for healthcare clients. Free pickup for qualifying volumes.
The HIPAA Security Rule at 45 CFR 164.310(d)(2)(i) mandates that covered entities implement policies for the final disposition of ePHI and the hardware on which it is stored. Every retired workstation, laptop, server, imaging device, and backup tape in your healthcare facility carries data subject to this requirement. Our HIPAA-compliant IT disposal process addresses this with documented, audit-defensible destruction.
Business Associate Agreement (BAA) executed before any equipment transfer. NIST 800-88 compliant destruction matched to each media type. Serialized certificate documenting every device by serial number, destruction method, date, and certifying technician. Documentation format designed for Joint Commission survey defense and OCR audit response. Full chain of custody from your facility to final disposition.
Hospitals and health systems. Physician practices and medical groups. Dental practices and oral surgery centers. Outpatient and ambulatory surgical centers. Behavioral health and substance abuse treatment facilities. Long-term care, skilled nursing, and assisted living facilities. Home health agencies. Health insurance companies and TPAs. Medical billing and coding companies. Healthcare IT vendors, EHR providers, and health information exchanges.
Florida Bar Rule 4-1.6(a) requires confidentiality of client information. ABA Formal Opinion 477R extends that duty to electronic data, including data on devices no longer in active use. When a law firm retires laptops, desktops, or servers that once held case files, email archives, billing records, or discovery materials, those devices carry professional liability exposure until every byte of data is physically destroyed under documented procedures. An ‘I formatted the drive’ is not a defense. A serialized certificate of destruction is.
Physical destruction of all storage media from retired devices. Serialized certificate documenting every drive. Documentation supports professional liability defense and Bar disciplinary inquiry response. Chain of custody from your office to final destruction. On-site witnessed destruction available for firms requiring drives to never leave the premises.
FERPA (20 U.S.C. 1232g) protects student education records from unauthorized disclosure. When a school district retires Chromebooks, laptops, lab computers, and administrative servers, student data on those devices requires documented destruction with the same rigor as healthcare or legal data. Florida school districts cycling through 1:1 device programs generate thousands of retired student devices every summer that need FERPA-compliant disposal.
NIST 800-88 compliant destruction of all storage media. Serialized certificate covering every device. Volume pricing for district-wide and university-wide refresh programs. Summer and break-period pickup coordination. Value recovery for newer Chromebooks and laptops entering remarketing.
Serialized, not summarized. Standard recyclers issue weight-based certificates: ‘500 pounds of electronics recycled.’ We issue device-level certificates: ‘Drive serial ABC123 destroyed by physical shredding on [date] by [technician].’ When regulators ask for proof, ours answers the question. Theirs does not.
Compliance-fluent team. Our team understands HIPAA, FERPA, GLBA, SOX, PCI DSS, FACTA, and Florida Bar requirements because we serve these industries daily. We do not need your compliance officer to explain what documentation they need. We already know.
BAAs executed upfront. Healthcare clients receive Business Associate Agreements before any equipment is transferred. Not after. Not upon request. Standard process.
One vendor for all three sectors. Organizations operating across healthcare, legal, and education (hospital-affiliated law departments, university medical schools, school-based health clinics) get one vendor, one process, one certificate standard across every division.
HIPAA, FERPA, and Florida Bar requirements apply regardless of your facility’s location. Excess IT Hardware serves regulated organizations across all of Florida and nationwide through our nationwide electronics pickup program. Multi-campus hospital systems, law firms with satellite offices, and school districts spanning multiple counties all benefit from consistent documentation and a single vendor relationship.
Yes. Excess IT Hardware executes a Business Associate Agreement (BAA) before any healthcare equipment is transferred. The BAA establishes our obligations under HIPAA for handling and destroying equipment containing electronic protected health information (ePHI). This is standard process for every healthcare engagement, not an add-on or special request. BAAs are executed at no additional cost.
A standard recycling receipt documents weight: ‘500 pounds of electronics were recycled.’ Our serialized certificate of destruction documents every individual device by serial number, including the specific destruction method applied (shredding, erasure, degaussing), the processing date, and the certifying technician. When a HIPAA auditor asks ‘how was the data on laptop serial number XYZ destroyed,’ our certificate provides the specific answer. A weight-based receipt cannot.
Yes. Excess IT Hardware coordinates volume pickups around the school calendar, with summer and break-period scheduling to minimize disruption. We handle thousands of devices per engagement for Florida school districts, charter schools, and universities. Value recovery on newer Chromebooks and laptops offsets costs. One consolidated serialized certificate covers the full engagement and documents every device for FERPA compliance reporting.
Yes. Our destruction process produces serialized certificates documenting the physical destruction of every storage device by serial number. This documentation supports professional liability defense and Florida Bar disciplinary inquiry response related to client data handling on retired electronic devices. On-site witnessed destruction is available for firms requiring that drives never leave the premises. Chain of custody documentation covers every step from your office to final destruction.
Certificates are issued within 24 hours of processing for all engagements. For on-site destruction (mobile shredding or crushing at your facility), certificates are issued before our crew leaves the premises. Certificates are delivered digitally in PDF format and include every device serial number, destruction method, processing date, and certifying technician name. The format is designed to satisfy HIPAA, FERPA, Florida Bar, GLBA, SOX, PCI DSS, and FACTA documentation requirements.
Healthcare, legal, and education organizations across Florida trust Excess IT Hardware because we understand that a recycling receipt is not a compliance document. A serialized certificate of destruction is. From HIPAA to FERPA to Florida Bar Rule 4-1.6, we provide the documentation your auditors, regulators, and insurers require. Free pickup for qualifying volumes. Certificates within 24 hours. BAAs executed before equipment moves.
Schedule your compliance-grade recycling pickup or call (561) 600-8656. We respond within one business day. EPA ID FLR000269027.
