Passing on old laptops and computers is a great way to extend the life of working hardware. But giving away a device without properly wiping it first creates a real data risk for you and a potential security issue for the recipient.

Before You Donate: The Safe Way

1. Back up anything you need. Once wiped, the data is gone permanently.
2. Have the device professionally wiped. A certified wipe removes all data and installs a fresh operating system.
3. Get a Certificate of Data Destruction. This confirms your data has been permanently removed.
4. Check the device is functional. People need devices that work, not e-waste.

What Happens to Donated Devices

At Data Destruction Thailand, every donated device goes through a standardised process:

• Logged and inventoried
• Graded for condition (A through D)
• All data permanently wiped
• Fresh OS installed (Windows 11 or Linux)
• Listed as a free device for anyone who needs one

Grade D Devices

Not every device is usable. Grade D devices (non-functional or missing critical components) are broken down for parts or sent through certified e-waste recycling channels. Nothing goes to landfill.

Ready to donate? Get in touch or request a quote for data destruction.

Thailand consistently ranks among the highest in Southeast Asia for online fraud. While phishing and social engineering get most of the attention, a significant source of personal data is much simpler: old phones and laptops that were thrown away or sold without being properly wiped.

What a Discarded Phone Contains

A typical phone sold or discarded without a certified wipe still contains:

• LINE conversations and contacts
• Banking app sessions and saved credentials
• PromptPay registration details
• Photos of ID cards, passports, and documents
• Email access and social media logins
• WiFi passwords and network history

How This Data Gets Used

Recovered data is used for identity theft, unauthorised bank transfers, SIM swap attacks, social media impersonation, and targeted scam calls. A single phone can provide enough information to open accounts, apply for loans, or impersonate someone convincingly.

How to Protect Yourself

1. Never sell or donate a device without a certified data wipe
2. Factory reset alone is not sufficient (it leaves data recoverable)
3. Request a Certificate of Data Destruction as proof
4. Consider physical destruction for devices containing highly sensitive data

If you have old phones or laptops sitting in a drawer, they are not safe just because they are out of sight. Data remains accessible until it is properly destroyed.

Learn about personal data destruction services.

Most Thai businesses understand that PDPA governs how they collect and store personal data. Fewer realise that it also covers what happens when that data reaches end of life. If your organisation disposes of hardware without documenting data destruction, you are exposed to PDPA liability.

The Key Requirements

• Personal data must be destroyed or anonymised when no longer needed
• Destruction must be documented with an auditable trail
• The organisation remains liable until destruction is confirmed
• Penalties: up to ฿5 million administrative fine

Practical Checklist for IT Managers

1. Inventory all devices being decommissioned (serial numbers, types, locations)
2. Classify which devices stored personal data
3. Choose a destruction method: certified wipe or physical destruction
4. Obtain a Certificate of Data Destruction per device
5. Retain certificates for your compliance records
6. Document the process in your data protection policy

Common Mistakes

Formatting drives and calling it done. Formatting does not overwrite data and does not meet PDPA standards.

Donating old equipment without wiping. Good intentions, but your liability follows the data on the device.

No documentation. Without a certificate, you have no proof that data was destroyed.

Learn more about corporate IT asset disposal.

When you perform a factory reset on your phone, tablet, or laptop, the device marks the storage space as available. It does not overwrite the data. The files, photos, messages, and passwords remain on the drive until new data happens to be written over them.

This means anyone with basic data recovery software (much of it free and publicly available) can retrieve your files after a standard reset.

What Remains After a Factory Reset

• Photos and videos
• Saved passwords and login tokens
• LINE and WhatsApp message history
• Banking app data and payment credentials
• ID card scans and personal documents
• Browser history and autofill data

What Does Remove Data Permanently?

A certified data wipe uses industry-standard methods to overwrite every sector of the storage device, making recovery impossible. Physical destruction goes further by rendering the storage media physically unusable.

Both methods result in a Certificate of Data Destruction that documents the process, the method used, and the date.

What You Should Do Before Selling or Donating a Device

If you plan to sell, donate, or throw away any device, have it professionally wiped or destroyed first. The risk of identity theft from recovered data is real, especially in regions with high rates of online fraud.

Get a quote for certified data destruction.

Not everything has data on it, but that doesn't mean it should go to landfill. Cables, monitors, keyboards, printers, and mixed electronics all need responsible disposal.

Working components are donated or recycled. Non-working items are processed through certified e-waste channels. Nothing goes to landfill.

What We Accept

• Cables and chargers
• Monitors and displays
• Keyboards and mice
• Printers and scanners
• Mixed electronics and peripherals
• Network equipment (routers, switches)

For Businesses

One job clears everything. Combine your data destruction order with e-waste disposal and handle the entire office cleanout in a single pickup. Ideal for companies upgrading equipment or relocating.

Pricing

E-waste disposal is priced on application. Request a quote with details about the type and volume of e-waste.

If you have already removed the drive from your device, send the drive on its own. Physical destruction is the only method that guarantees data cannot be recovered by any means.

Hard drives and SSDs store data even after formatting. Software-based recovery can pull files, photos, and passwords from a formatted drive in minutes. Physical destruction eliminates this risk entirely.

What You Get

• Physical destruction of every drive
• Certificate of Destruction (serial number, method, date)
• PDPA-compliant documentation

Pricing

฿200 per drive for physical destruction with certificate.

Accepted Drives

• 2.5" and 3.5" hard drives (HDD)
• Solid state drives (SSD)
• M.2 and NVMe drives
• External hard drives (removed from enclosure)

Your phone holds more sensitive data than your laptop: banking apps, LINE history, PromptPay, photos, ID scans, saved passwords. Factory reset alone does not remove all of this. Data remains recoverable with standard tools.

Thailand has one of the highest rates of online scams in Southeast Asia. Many start with personal data recovered from old devices. When you sell or throw away a phone without a certified wipe, every app, message, and photo on it becomes accessible.

What Gets Permanently Deleted

• LINE, WhatsApp, Facebook and all social apps
• Banking and payment apps (PromptPay, mobile banking)
• Saved passwords and autofill data
• Photos and videos
• ID card scans and personal documents
• Everything else, unrecoverably and permanently

Pricing

Servers hold your most sensitive data: customer records, financial data, employee files. Server decommission is a compliance event, not just a hardware task. Your organisation remains liable for the data on every server until destruction is documented.

What You Get with Every Server Job

• Certificate of Data Destruction per server (serial number, method, date)
• Full inventory report
• Physical destruction with photo and video evidence available
• PDPA-compliant process from collection to certificate
• Office collection available for bulk jobs

Pricing

Server disposal starts from ฿1,500 per unit. Contact for an exact quote based on server type, quantity, and requirements.

PDPA Compliance

Thailand's PDPA requires secure, documented destruction of personal data at end of device life. Your certificates provide the paper trail your legal and compliance teams need. Read the full PDPA guide.

Old desktop PCs are often passed on within families or offices with years of personal files, passwords, and photos still on the hard drive. A desktop from 2018 can still have full banking history, passwords, and ID scans accessible to anyone who plugs it in.

Your desktop's hard drive stores everything: documents, photos, browser history, saved passwords, banking sessions. Formatting does not remove this data. Only a certified wipe or physical destruction guarantees it is gone.

What You Get

• Certified, permanent data wipe or physical destruction
• Certificate of Data Destruction (serial number, method, date)
• PDPA-compliant process
• Option to wipe and return with a fresh OS

Pricing

Deleting files or formatting your hard drive is not enough. Deleted data is recoverable with free software available to anyone. Only a certified wipe or physical destruction removes data permanently.

Your laptop holds years of personal and professional data: passwords, banking details, photos, ID scans, company files. When you sell, donate, or throw away a laptop without properly wiping it, that data remains accessible to anyone with basic recovery tools.

What You Get

• Certified, permanent data wipe or physical destruction
• Certificate of Data Destruction (serial number, method, date)
• PDPA-compliant process from pickup to certificate
• Option to wipe and return with a fresh OS (Windows 11 or Linux)

Pricing

Wipe and Return

Your laptop comes back with Windows 11 or Linux installed, your choice. Clean, ready to use, donate, or pass on to a family member. Windows activates later if needed.

Donation Option

Don't want it back? Working laptops are given away free to people who need a device. You receive a certificate confirming your data was destroyed.