The Best IT Asset Disposition (ITAD) Practices for Financial Institutions

Financial institutions face some of the most demanding IT asset disposition requirements of any sector. The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to protect customer financial information throughout its lifecycle, including at disposal. PCI DSS requires that cardholder data environments be sanitized to NIST 800-88 standards before any hardware is decommissioned. SEC and FINRA recordkeeping rules create additional requirements around how long certain data must be retained before destruction is permitted. Non-compliance with these requirements can trigger examination findings, enforcement actions, and customer notification obligations.

Best-practice ITAD for financial institutions starts with a comprehensive device inventory that includes not just computers and servers but also ATMs, point-of-sale terminals, network equipment, telephone systems, and even some building security systems that may store transaction or access data. Each device category requires specific assessment for data storage and specific destruction methods appropriate to its media type.

STS Recycling has experience serving financial institutions in Illinois and the Midwest, with ITAD processes designed to meet GLBA, PCI DSS, and applicable SEC/FINRA requirements. We provide on-site data destruction options for the most sensitive environments, serialized certificates meeting specific regulatory documentation standards, and downstream audit trails. Contact Chicago Lamp Recycling at 866-770-2650 to discuss a tailored ITAD program for your financial institution.