
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Summer is short and the refresh is big. Coretek 360 collects Chromebooks, laptops, and classroom hardware over breaks, destroys student data to NIST 800-88, and returns the resale value to your district.
Get a quotePickups fit the school year, student data is destroyed to NIST 800-88 in support of FERPA, and the resale value comes back to the district with the records your business office needs. Five stages, one point of contact.
We plan collection around your calendar and your E-rate funded refresh cycle. Old devices leave over summer, winter, or spring break, and new ones are staged and imaged before classes start. One plan covers every campus, so your technology team is not coordinating building by building.
Chromebooks, laptops, tablets, charging carts, and classroom displays are collected from each campus in tracked vehicles. Chain of custody is documented from the first pickup, so no student device goes unaccounted for between the classroom and our floor.
Every device that held student records is wiped to NIST 800-88 and verified, or shredded. Your district can show the board, parents, and auditors that FERPA protected education records were destroyed before any device was reused or recycled. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
Chromebooks, laptops, and tablets with life left in them are refurbished and resold through our sales channels, with the value returned to your district. Devices past reuse go to R2v3 certified downstream processors, as a RIOS Certified Recycler.
A final report lists every device by serial number with a certificate of data destruction. Your technology director can close fixed asset records, and your business office has answers ready for the board and the state auditor.
Coretek 360 will schedule it around your school calendar, handle the data and the paperwork, and return the resale value to your district.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.