Do You Know Where Your Old Laptops Are?

Most companies treat e-waste disposal as a logistics problem. Under Indian and Malaysian law, it's a compliance obligation with documentation requirements, authorised recycler mandates, and audit exposure if you get it wrong. This guide covers what you need to know, and what to do about it.

The Compliance Gap Most Businesses Don't Know They Have

When IT assets reach end of life, the default in most organisations is to call a local scrap dealer quick, easy, and cheap. But e-waste is regulated differently from general scrap. Under India's E-Waste (Management) Rules, 2022 and Malaysia's Environmental Quality Act (EQA) 1974 and the Scheduled Wastes Regulations 2005, electronic waste must be handed over to authorised recyclers only with mandatory documentation at every step.

If your organisation cannot produce a recycling certificate and Form 6 (India) or a Scheduled Waste consignment note (Malaysia) during an audit, the regulatory default is non-compliance regardless of intent.

The Central Pollution Control Board (CPCB) in India and the Department of Environment (DOE) in Malaysia have both increased enforcement activity in recent years. Penalties range from financial fines to, in serious cases, operational consequences. For companies investing in ESG reporting or sustainability credentials, unverified e-waste disposal also creates material reputational risk.

What Counts as E-Waste?

E-waste - formally called Waste Electrical and Electronic Equipment (WEEE) covers a broader category than most procurement and IT teams realise. If your organisation regularly upgrades its technology stack, all of the following require compliant disposal:

• Laptops, desktops, servers, and workstations
• Monitors, printers, scanners, and peripherals
• UPS systems and battery backup units
• Networking hardware, routers, switches, access points
• Mobile phones and tablets issued to employees
• Lithium battery packs and power banks
• Cables, adaptors, and legacy storage media

The Data Security Risk Inside Every Old Device

Beyond regulatory exposure, there's a data security dimension that rarely gets the attention it deserves. A laptop passed to an unauthorised vendor doesn't have its storage media professionally destroyed. Factory resets and file deletion leave data recoverable using freely available forensic tools in some cases, in under an hour.

For organisations in banking, insurance, healthcare, legal services, or any sector handling personal data under India's Digital Personal Data Protection Act (DPDPA) or Malaysia's Personal Data Protection Act (PDPA), this is a compliance breach waiting to happen. SND Recycler's certified data destruction service ensures every storage device is wiped or physically destroyed to a documented standard with a written certificate for each device your compliance team can file and reference.

"Certified data destruction means a written certificate for every device. Not because someone might ask. Because if they do, it's the only thing that protects you."

Why Lithium Batteries Need Separate Handling

Lithium batteries found in laptops, UPS units, and backup power systems present a physical hazard that goes beyond paperwork. A damaged or aging lithium cell can enterthermal runaway: a self-sustaining chemical reaction that generates its own heat and does not require an external flame to cause a fire. Storage in an uncontrolled environment, particularly alongside other equipment, significantly increases this risk.

Both Indian and Malaysian regulations require lithium batteries to be collected, transported, and processed under approved protocols separately from general e-waste. This is not an overcautious procedure. It is the minimum standard required by law.

The Documents You Need to Be Audit-Ready

Compliance is only provable through documentation. After every authorised disposal, your organisation should hold:

India

Form 6 - mandatory disposal record under E-Waste Management Rules 2022

India

Recycling certificate from the authorised recycler, with CPCB registration details

Malaysia

Scheduled Waste consignment note (Form A) under DOE Scheduled Wastes Regulations

Both Markets

Certificate of data destruction - per device, specifying method and standard used

Both Markets

EPR compliance records where applicable - producer registration and recycling targets

Both Markets

Chain-of-custody record - full asset tracking from premises to processing facility

How SND Recycler Manages the Process

SND Recycler is an authorised e-waste recycler operating in compliance with applicable regulations across India and Malaysia. The process is designed to remove the operational burden from your team entirely, from doorstep collection and full asset tracking to audit-ready documentation and certified data destruction. You can see the full range of services here.

• Doorstep collection- scheduled pickup from your premises. No transport arrangements required from your side.
• Full asset tracking- every item logged from collection to processing, with a complete chain of custody.
• Audit-ready documentation- Form 6, recycling certificates, and EPR records issued as standard. Not on request, as part of every disposal.
• Certified data destruction- software wipe or physical destruction per device, with a written certificate for your records.
• Lithium battery expertise- separate collection, trained personnel, approved processing. Off your site and off your liability.

The goal is straightforward: your organisation disposes of equipment correctly, has documentation to prove it, and your team carries none of the logistics weight. Get in touch to start with a free inventory assessment.

Frequently Asked Questions

What are the E-Waste Management Rules 2022 in India?

India's E-Waste (Management) Rules 2022 regulate the collection, storage, and recycling of electronic waste. Bulk consumers must dispose of e-waste only through CPCB-authorised recyclers and maintain disposal records, including Form 6.

Is e-waste regulated in Malaysia?

Yes. In Malaysia, electronic waste is classified as scheduled waste under the Environmental Quality (Scheduled Wastes) Regulations 2005. DOE-licensed contractors must handle collection and disposal, and generators must maintain consignment records and waste manifests.

What is EPR compliance for e-waste?

Extended Producer Responsibility (EPR) places the obligation of responsible disposal on producers, importers, and bulk consumers of electronic equipment. Organisations must meet annual recycling targets and demonstrate compliant disposal through authorised channels.

Why can't we give old IT equipment to a scrap dealer?

Informal scrap dealers are not authorised recyclers under Indian or Malaysian law. This creates regulatory non-compliance, leaves data unprotected, and generates no valid documentation. See SND's compliant disposal services for how the right process works.

What is certified data destruction?

Certified data destruction is the secure removal of data from storage media, either through software wiping to a recognised standard (such as NIST 800-88) or physical destruction of the drive with a written certificate confirming the method and devices covered. Learn how SND handles data destruction.

How do I start e-waste disposal with SND Recycler?

It starts with a conversation. Contact SND Recycler with a basic inventory of the equipment you need to dispose of. We'll propose a pickup schedule and confirm the documentation package. Most engagements begin within a week of the first conversation.