Workstation Disposal FAQ

Improper disposal of computers can pose substantial risks to the entire university. If a computer is lost or not securely disposed of, sensitive information such as research data, HIPAA-protected clinical information, student records, intellectual property, and credentials may be exposed. These breaches have the potential to lead to regulatory fines, reputational harm, and a loss of trust from our community and research sponsors.


Does my device need to go through the workstation disposal process?

Decision tree infographic. If any of the following is true, your device needs to go through the workstation disposal process.
My workstation has handled PHI.
I'm leaving WashU and taking my laptop with me. 
My workstation is being reassigned.
My laptop will be donated.
I'm not sure, but I need to get rid of my workstation.

What do you need to do?

  • Complete the “Reimage, Reuse, Remove Computer from WashU” request in ServiceNow.
  • Work with the IT Technician to schedule a time for your device’s disposal.
  • IT will wipe your device and update the asset management information. Please ensure you back up any important information beforehand, as the data will be irretrievable afterward.
  • If the device is being redeployed, IT Technicians will ensure it is delivered to the appropriate location.

Note: If there is any chance a device encountered protected health information or university-sensitive data, we should ALWAYS assume it did. Which means it would need to go through the workstation disposal process.


Things to consider when submitting a request

Scope: All devices containing university applications or data must be securely wiped before disposal.

Sensitive Data: If your device has stored protected or sensitive data, such as protected health information (PHI) or research data, it requires additional disposal steps.

Donation: Are you donating your computer to another user at WashU or to someone externally?

Leaving the Organization: Is the workstation going with someone who is graduating, retiring, or otherwise leaving the organization?


What to expect

Data Wipe: Your workstation will be cleared of all data. Please ensure you back up any important information beforehand, as the data will be irretrievable afterward


What is the purpose of the Information Security Device Management Policy?

This policy outlines security expectations for all devices that access WashU’s information resources and provides specific details for devices that handle WashU Protected Data and Information. Following WashU Policy 103 on Information Security Device Management is crucial for safeguarding our patients, students, faculty, and the university’s mission.


References


User Support


For assistance, users can contact the IT help desk via email or phone, or access WashU’s self-service portal for guides, best practices, and troubleshooting resources.