Written question WQ99276

The Senedd Commission replaces ICT equipment such as laptops, desktops and mobile devices on a planned lifecycle, typically after around five years, to ensure that equipment remains fit for purpose and compliant with cyber security standards.

When equipment is retired, the Commission follows a controlled and auditable process. All surplus ICT equipment is collected and processed by an approved contractor. Any data held on devices is securely removed by the contractor, with certification provided to confirm that data has been erased. Records of disposal are maintained within the ICT Asset Management System.

Following data removal, equipment that has reached the end of its useful life or is damaged beyond repair is recycled in accordance with environmental regulations. Where devices remain functional but are no longer required by the Senedd, they may be redeployed internally or returned for donation through established arrangements with charitable organisations. These organisations distribute equipment to a range of beneficiaries across Wales.

This approach ensures that the Commission:

• Maintains strong data security through certified data erasure;

• Meets legal and environmental obligations, including compliance with relevant waste and data protection requirements;

• Maximises the use and value of public assets through reuse and donation where appropriate;

• Provides a clear audit trail for all disposal and reuse activity.

The Commission does not permit the sale of surplus ICT equipment to staff or Members.