Data protection compliance
The paper trail that proves your business met its GDPR obligations, not just assumed it.
You’re the data controller. We’re here to help you stay compliant.
Under UK GDPR, your responsibility for personal data continues until it’s verifiably destroyed. As your data processor, r3 certifies that destruction every step of the way, so you can demonstrate compliance whenever you need to, not just assume it.
You: The data controller
Your business decides how and why personal data is processed, including data on retired IT equipment
R3: your data processor
We act as your data processor under a written agreement, giving you the documented, accountable relationship GDPR requires
.
Why documentation matters
GDPR Article 5(2) requires you to demonstrate compliance, not just claim it. A verbal assurance from a supplier isn’t evidence, a report is. That’s exactly what the asset disposal and data destruction reports (on the Secure Data Destruction page) provide.
ICO fines for serious data breaches have reached into the tens of millions of pounds. A proper paper trail, backed by a clear controller-processor relationship, is what stands between your business and being unable to prove you did the right thing.