Data protection and destruction
GDPR FAQs
Practical questions about data protection, paper records, media destruction and Certificates of Destruction.
What information does UK GDPR apply to?
It covers personal data relating to identifiable people. That can exist in digital systems, on portable media and in printed paperwork.
Does data protection still apply to paper?
Yes. Printed emails, forms, contracts, notes and files can contain personal data and should be stored and disposed of appropriately.
How can professional shredding support compliance?
Secure destruction supports a documented retention and disposal process. A Certificate of Destruction gives your organisation a record that the work was completed.
Is deleting a file from a device enough?
Not necessarily. Data may remain recoverable, which is why end-of-life drives and media may require secure physical destruction.
This page provides general operational information, not legal advice. Organisations remain responsible for their own data-protection decisions and retention policies.
