What is on-site data destruction?
On-site data destruction means the destruction equipment — typically a mobile shredder or a portable wiping station — comes to your location. The destruction is carried out in your car park, loading bay, or server room, and you or a nominated representative can watch the process from start to finish.
The primary advantage is immediacy: the data never leaves your premises on an unshredded device. For organisations handling the most sensitive data categories — defence contractors, legal firms with privileged client files, healthcare providers with patient records — this is often the preferred option because it eliminates the chain-of-custody risk associated with transporting devices.
On-site shredding is typically charged per visit plus a per-device rate, so it can be less cost-effective for small volumes. Mobile shredders may also produce larger fragments than fixed industrial units, so organisations with strict particle-size requirements should confirm the equipment specification in advance.
What is off-site data destruction?
Off-site data destruction means devices are collected from your premises, sealed in tamper-evident containers, and transported to a secure processing facility where destruction is carried out. The chain of custody — recording who had possession of the devices at every point from collection to destruction — is documented throughout.
Off-site destruction gives providers access to high-capacity fixed equipment that can process large volumes efficiently. It is typically more cost-effective for regular collections or large IT refresh projects. The secure facility will often hold relevant certifications and operate under physical security controls that match or exceed those at a typical business premises.
The key requirement is that the chain of custody is robust and that the devices are contained in tamper-evident packaging at all times. If devices are transferred without adequate packaging or documentation, the chain of custody cannot be defended if challenged.
Comparison: on-site vs off-site data destruction
| On-site data destruction | Off-site data destruction | |
|---|---|---|
| Where destruction occurs | Your premises | Provider’s secure facility |
| Can you witness it? | Yes | Not directly (though witnessed destruction at facility can sometimes be arranged) |
| Chain-of-custody risk | Eliminated for shredding | Managed by documented transfer process |
| Equipment capacity | Limited by mobile unit size | High-capacity industrial equipment |
| Fragment size | May be larger (mobile unit dependent) | Typically smaller, more consistent |
| Cost for small volumes | Higher per-device (call-out charge) | Often lower |
| Cost for large volumes | Can be cost-effective | Cost-effective, especially for regular collections |
| Speed | Immediate, on the day | Varies — depends on transport and facility scheduling |
| Certificate issued? | Yes | Yes |
| UK GDPR compliant? | Yes, if carried out correctly | Yes, if chain of custody is documented |
| Best suited to | Highest sensitivity data, compliance-driven witness requirements | Most business scenarios, large volumes, regular collections |
Which option meets UK GDPR requirements?
Both approaches can satisfy the requirements of UK GDPR and the Data Protection Act 2018, provided they are carried out correctly. The accountability principle requires organisations to be able to demonstrate that personal data was destroyed securely — and both on-site and off-site providers can issue a certificate of data destruction that constitutes that evidence.
The key factors are:
- Documentation: A certificate of data destruction must be issued for every collection, recording device identifiers, the method used, the standard applied, and the date.
- Chain of custody: For off-site destruction, the chain of custody must be unbroken and documented. Tamper-evident packaging and collection manifests are essential.
- Method: The destruction method must be appropriate to the device type. Physical shredding destroys all device types. Software wiping requires the correct tool for the device type (see our guide to how to destroy an SSD for SSD-specific requirements).
The ICO does not prescribe on-site or off-site as a requirement. What it expects is that the process is appropriate, documented, and evidenced.
When should you choose on-site destruction?
Consider on-site data destruction when:
- Your data is classified under HMG IA Policy No.5 or similar government frameworks that require witnessed destruction
- Sector regulation requires you to maintain direct control over devices until the moment of destruction
- Your organisation’s risk appetite requires witness evidence as part of the compliance record
- You have a large volume of devices to process at once and a mobile shredder is the most practical option
- Your IT team or data protection officer needs to be present for operational reasons
When should you choose off-site destruction?
Off-site data destruction is appropriate when:
- You have a regular disposal programme and want cost-effective, recurring collections
- You are processing a mixed estate of devices that benefit from the equipment range available at a fixed facility
- You have reviewed the provider’s security accreditations and are confident in their chain-of-custody process
- Volume and logistics make bringing equipment to site impractical
Choosing a provider for either option
Whether you choose on-site or off-site destruction, your provider should be able to demonstrate:
- The specific destruction method and standard used (NIST SP 800-88, NCSC guidance, HMG IA Policy No.5 particle sizes)
- Tamper-evident packaging and a documented chain of custody for off-site collections
- A certificate of data destruction issued per device or per batch with individual device listing
- WEEE-compliant recycling of all residual material under the WEEE Regulations 2013
- Appropriate professional indemnity and insurance cover
For an overview of the data destruction process and what to expect, see our guide to what is secure data destruction.
Recycle4Charity offers certified data destruction for London businesses, with off-site collection and processing as our standard service. A certificate of data destruction is issued with every collection. Devices that pass certified wiping are refurbished and donated to digitally-excluded Londoners. Visit our data destruction for business page, or contact us to discuss your requirements.