Policyholder, claims and health data on retired laptops, desktops and servers, destroyed with a record and retired under your information security policy.
PrivAce Technologies retires IT for insurers, brokers and other intermediaries across India. Every drive is wiped, degaussed or shredded, onsite if your policy requires it, and you get a certificate for every job. Equipment with resale value is paid for before pickup.
What is at stake
Why disposal needs care here.
Insurers hold some of the most sensitive personal data there is: identity documents, medical reports, claims histories and bank details. Much of it passes through agent and branch laptops.
IRDAI issued its Information and Cyber Security Guidelines on 24 April 2023 for insurers and intermediaries. Asset management and secure handling of information run through them, and your internal policy will set the disposal method. We follow it.
Rules that apply
The requirements behind a disposal policy.
Plain summaries with links to the source. Your legal and compliance teams decide how they apply to you.
Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025: Personal data on a retired device is still your responsibility. Failing to take reasonable security safeguards can attract a penalty of up to ₹250 crore. Most obligations apply from 13 May 2027.
ISO/IEC 27001:2022, controls 7.14 and 8.10: Control 7.14 covers secure disposal or reuse of equipment, and 8.10 covers deletion of information. Certified organisations need evidence for both.
E-Waste (Management) Rules, 2022: Bulk consumers must hand e-waste only to a registered producer, refurbisher or recycler. In force since 1 April 2023.
What we do
How we handle it for you.
Onsite wiping or shredding for claims and underwriting systems
Agent and branch laptop collection across cities as one job
Erasure reports and destruction certificates for your information security team
Recycling certificate for the EHS and ESG file
Questions
Questions, answered.
IRDAI’s 2023 Information and Cyber Security Guidelines cover asset management and information security for insurers and intermediaries. Check the exact disposal clause with your CISO; we work to whatever method your policy sets.
Yes. We serve 497 cities and can consolidate pickups into one job with one set of certificates.
The DPDP Act does not create a separate category for health data, but it is among the most sensitive personal data you hold. We recommend destruction or verified erasure with a certificate for every drive that held it.
Tell us your requirement when we scope the job, and we will review your agreement.
