PrivAce Technologies retires IT for hospitals, diagnostic chains and clinics across India: workstations, laptops, EMR and PACS servers, storage and network equipment. Drives are wiped, degaussed or shredded, onsite if your policy requires, and you get a certificate for the job. Working equipment is paid for before pickup.
What is at stake
Why disposal needs care here.
Hospitals hold identity, insurance, diagnosis and imaging data on hundreds of shared workstations. Old imaging and EMR servers often keep years of records.
The DPDP Act, 2023 treats all of this as personal data with security and erasure duties, and a breach that follows careless disposal can attract a penalty of up to ₹250 crore.
Rules that apply
The requirements behind a disposal policy.
Plain summaries with links to the source. Your legal and compliance teams decide how they apply to you.
Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025: Personal data on a retired device is still your responsibility. Failing to take reasonable security safeguards can attract a penalty of up to ₹250 crore. Most obligations apply from 13 May 2027.
E-Waste (Management) Rules, 2022: Bulk consumers must hand e-waste only to a registered producer, refurbisher or recycler. In force since 1 April 2023.
ISO/IEC 27001:2022, controls 7.14 and 8.10: Control 7.14 covers secure disposal or reuse of equipment, and 8.10 covers deletion of information. Certified organisations need evidence for both.
What we do
How we handle it for you.
Onsite destruction for EMR, PACS and lab system storage
Ward-by-ward workstation collection with minimal disruption
Erasure reports and destruction certificates for the hospital’s records
Recycling through an MPCB-authorised plant
Questions
Questions, answered.
We handle the IT: workstations, servers, storage, laptops and networking, including the computers attached to diagnostic equipment. Tell us about any clinical devices and we will advise case by case.
Yes. Wiping, degaussing or shredding can happen onsite, witnessed by your IT team.
The Act does not create a separate category, but patient data is among the most sensitive personal data a hospital holds. Destroy it with a record.
Yes. Collection is planned department by department so clinical areas are not disrupted.
