There is a stack of it in the storage room right now. Eleven desktops replaced two refreshes ago, four monitors, a laptop with a cracked bezel, a box of keyboards, and the switch you pulled out when the new one went in. Every time you walk past you think the same two thoughts in the same order. Somebody could use these. And then, right behind it, I am not sure what is still on them.
So the stack stays where it is for another year. That instinct is a good one, by the way. Donating retired equipment to a local school program, a church, or a small nonprofit is one of the highest impact things a small business can do with almost no cash outlay. But there is a right way to hand it over, and a way that quietly turns a generous act into a data breach with your name on it. One note first. This article touches on the tax treatment of donations, and none of it is legal, tax, or accounting advice. Talk to your CPA about your situation.
Start With the Data, Not the Hardware
Before you think about who gets what, deal with what is on it. The reference here is Special Publication 800-88 Revision 1, published by the National Institute of Standards and Technology, the federal agency known as NIST, in 2014. It sorts sanitization, meaning the removal of data, into three levels, and the difference is the whole game.
- Clear. Overwriting the drive with normal read and write commands so ordinary recovery software finds nothing. This is the right level for most low sensitivity equipment going to a local recipient you know.
- Purge. Stronger techniques that make recovery infeasible even with laboratory equipment, such as a drive’s built in secure erase or a cryptographic erase that destroys the encryption key so the remaining data is permanent gibberish.
- Destroy. Physically wrecking the drive so it can never store data again. Use this when the data was sensitive, when the drive has failed and will not respond to commands, or when you just need certainty.
Two things trip people up. First, deleting files and emptying the recycle bin does nothing, and neither does a quick format. Both remove the table of contents and leave the book intact. Second, solid state drives, the flash based storage in most machines built in the last decade, do not overwrite the way old spinning drives did. They shuffle data around internally, so a plain overwrite pass can leave copies in places it never touched. For flash storage, use the built in secure erase or destroy the drive.
When Wiping Is Not Enough
Sometimes a wipe is not on the table. The drive is dead and will not accept commands. The machine held patient records, client financials, or anything covered by a contract that specifies destruction. Or you simply do not want to spend years wondering. In those cases the answer is physical destruction, and it is a service we run in house.
Harrison Ward Technology owns a Pure Leverage DCV71 hard drive crusher. It punches through the drive and deforms the platters or circuit board so thoroughly that the media physically cannot hold data, at roughly nine drives a minute, meeting recognized destruction standards. Speed matters, because a business clearing out a decade of equipment is often looking at dozens of drives, and the alternative is shipping them to a stranger or letting them sit in a closet forever.
Whatever route you take, get documentation. NIST calls this a certificate of media disposition, and it records the make, model, and serial number of each drive, the method used, who did it, and when. It costs nothing to produce and it is the only thing that helps you if somebody asks two years from now.
The practical move is simple. Pull the drives out, destroy those, and donate the rest of the machine. A desktop without a drive is still a good desktop, and a new drive costs very little. That gives you certainty on the data and still gets working hardware to somebody who needs it.
The Licensing Question Nobody Asks Until Later
This is where well meaning donations go sideways. Microsoft has stated plainly that OEM Windows licenses, meaning the copy of Windows preinstalled at the factory, cannot be transferred to a different PC. That license generally stays with the original hardware, so a donated machine with its factory sticker is usually fine as is. What you cannot do is pull licenses off retired machines and consolidate them elsewhere, and you certainly cannot pass along volume licensed business software, your accounting package, or subscription seats.
The clean approach is to hand over hardware with either its original factory operating system or nothing at all, and let the recipient license it properly. Nonprofits have good options most donors do not know about. TechSoup, which distributes donated and steeply discounted technology to qualifying organizations, is the standard starting point, and Microsoft’s refurbisher programs let qualified companies install genuine, licensed Windows on secondhand machines. Point your recipient there instead of handing them a licensing problem wrapped in a nice gesture.
What Nonprofits Actually Need
The uncomfortable truth is that a lot of donated equipment becomes the recipient’s disposal problem. A ten year old tower with two gigabytes of memory is not a gift, it is a chore with a bow on it. Before you load the truck, call and ask.
- Machines new enough to run current, supported software. If the hardware cannot run an operating system that still receives security updates, you are handing over a liability, not a computer.
- Monitors, docking stations, cables, and power adapters. These are chronically short in nonprofits, they never really go out of date, and nobody thinks to donate them.
- Networking gear that is still supported. A managed switch or a current wireless access point solves a real problem for an organization running on whatever the internet provider handed over.
- Quantity of one identical model. Twelve matching machines beat twelve different ones, because whoever supports them has one setup to learn instead of twelve.
- Help getting rid of what they already have. Many have their own closet of old equipment and no safe way to dispose of it. Offering to handle that is sometimes the better gift.
Skills Are Usually Worth More Than Stuff
The most valuable thing most small businesses can donate is not in the storage room. It is a few hours of somebody who knows what they are doing. Small nonprofits and community groups around Denton County often run on a volunteer who is technical by accident, and they have the same gaps every small business has. Nobody has tested a restore. Everyone shares a login. Multi factor authentication, meaning a second proof of identity beyond a password such as a code from a phone app, is off because nobody knew to turn it on.
An afternoon fixing those things is worth more than a truckload of hardware, and it does not depreciate. Write down what you did and hand it over, because documentation is the part that outlives your involvement.
The Bottom Line
Give the gear away, but do the data first. Wipe what can be wiped properly, physically destroy what cannot, keep a record either way, and ask the recipient before assuming they want it. On the tax side, the IRS requires Form 8283 when your deduction for all noncash gifts totals more than $500. Again, this is general information and not legal or tax advice, so run your situation past your CPA.
If you have a stack of retired equipment and want the drives destroyed with a record of it before the rest goes to a good home, we do that in house on our own crusher, and we are glad to help you sort what is worth donating from what is only worth recycling. Get in touch at https://harrisonward.com/contact/.
Comments are closed