Of all the legal concepts relevant to disposing of IT equipment, duty of care is arguably the one every business should understand in full, because it applies universally, regardless of sector, size, or the volume of equipment involved. It is the foundation on which most other IT disposal compliance obligations rest.
Duty of care, established under the Environmental Protection Act, requires anyone who produces, holds, or transfers waste to take all reasonable steps to ensure that waste is managed properly, right through to its final disposal or recovery. Crucially, this duty does not end the moment waste changes hands. A business that hands redundant IT equipment to a disposal contractor retains a duty of care to have taken reasonable steps to ensure that contractor was appropriately authorised and competent to handle it, and that the waste was accurately described when it was transferred.
In practical terms, discharging duty of care involves several concrete actions. Waste must only be transferred to someone legally authorised to receive it — a registered waste carrier for collection, and an appropriately permitted or exempt site for treatment. The waste must be accurately described at the point of transfer, which for IT equipment means correctly identifying whether it includes hazardous components requiring different documentation. A written record of the transfer — a waste transfer note, or a hazardous waste consignment note where applicable — must be completed and retained, typically for a minimum of two years, though many organisations retain records considerably longer given the audit trail value.
Duty of care is a “reasonable steps” test, not a strict liability standard, which means regulators generally focus on whether an organisation took sensible, proportionate precautions rather than expecting exhaustive investigation into every contractor. Checking a waste carrier’s registration on the public register, confirming a treatment site’s environmental permit covers the relevant waste types, and retaining transfer documentation are all considered reasonable steps that meaningfully discharge the duty.
Where organisations run into difficulty is not usually through deliberate non-compliance, but through informal or undocumented arrangements — equipment handed to whoever offers to take it away for free, without any registration check or paperwork. This is precisely the scenario duty of care is designed to discourage, because “free” IT collection with no documentation is a well-known route through which equipment ends up illegally exported or informally dismantled, exposing the original business to regulatory risk despite having no direct involvement in what happened afterwards.
The reassuring corollary is that duty of care compliance is genuinely achievable with modest, consistent effort: use registered, permitted providers, keep the paperwork, and treat IT disposal with the same procedural rigour as any other regulated business activity.