Data Protection Compliance

Supporting GDPR compliance for every device processed

The General Data Protection Regulation (GDPR) is the EU and UK's primary framework for the lawful processing of personal data. It applies to any organisation processing the personal data of EU or UK citizens. For refurbishers, resellers and ITADs handling devices from those markets, GDPR compliance isn't optional - and the penalties for getting it wrong are substantial.

Blackbelt360 supports GDPR compliance in three ways: through certified data erasure that removes personal data securely and verifiably; through detailed audit trails proving what was done to every device; and through an information security management system (ISO 27001) governing how we handle data across the platform. Every erasure generates a tamper-evident certificate - the evidence you need to prove GDPR-compliant device disposal to your regulators, your buyers and your enterprise customers.

Supporting NIS-compliant operations in the UK and EU

The Networks and Information Systems Regulations 2018 set cyber security requirements for operators of essential services and digital service providers in the UK. The Cyber Security and Resilience Bill, currently before Parliament, will replace them. In the EU, the equivalent regime is NIS2. For refurbishers, resellers and ITADs handling devices from telecoms, utilities, healthcare, financial services or other critical infrastructure sectors, these requirements flow down through the supply chain - if the enterprise buyer is regulated, they need assurance that whoever handles their devices meets the same standard.  

Blackbelt360 supports those operations through certified data erasure, comprehensive audit trails documenting every action taken on every device, and certified information security governance under ISO 27001. 

How we support your compliance 

Certification, evidence and control

Every action Blackbelt360 takes on a device generates auditable evidence. Every wipe produces a tamper-evident certificate. Every test creates a record. Every grade is tied back to the underlying data. The entire audit trail is centrally stored, exportable in multiple formats (PDF, CSV, XML, JSON) and available on demand - whether the audit comes from ADISA, R2, an enterprise buyer or your data protection officer.

For full detail on Blackbelt360's certifications and standards, see the main Compliance page.