When an employee leaves, many IT teams hit Factory reset or Delete and call the laptop clean. That feels safe. For business data, it usually is not. A factory reset prepares a device for a new user. It does not securely wipe the hard drive the way auditors and GDPR expect.
What a factory reset actually does
A factory reset removes apps, user accounts and the visible files on the system. On many laptops it also reinstalls a fresh OS image. What it often does not do is overwrite every sector of the disk. Large parts of the old data can stay on the drive until something else writes over them.
That is why search terms like factory reset data recovery keep showing up. Recovery tools and forensic labs can often pull back documents, mail caches and fragments of databases after a simple reset. For a personal tablet that is annoying. For a company laptop with customer files, it is a real risk.
Delete and format are not a wipe either
Deleting a file usually removes the pointer to that file, not the data itself. A quick format does something similar: it rebuilds the file system map and leaves most of the old content untouched. Anyone with basic recovery software can often restore a surprising amount.
A proper wipe hard drive business process overwrites the full media (or cryptographically erases self-encrypting drives) and then verifies that recovery fails. That verified step is what turns a cleanup into evidence you can show an auditor or a customer.
When the risk is highest
Risk jumps when devices leave your control: resale, donation, return to a leasing company, or a bulk clear-out after an office move. A reset that looked fine on your desk becomes a problem the moment the laptop sits with someone else.
It is also higher on older HDDs and on devices that failed mid-reset. Failed resets, interrupted updates and drives that no longer boot are exactly the cases where DIY cleanup stops being reliable. Those media need certified erasure or physical destruction, not another click on Reset.
What companies should do instead
Treat every company laptop as a data carrier until you have proof it is clean. Use certified erasure software aligned with current sanitisation practice, verify the result, and keep a certificate per device or drive. Where verification fails or the data is high risk, move to physical destruction.
If you do not want that process in-house, hand the devices to a pickup partner that registers serial numbers, wipes or destroys with proof, and reports the outcome. GreenByte does this across Belgium and France, so the laptop leaves your site once and comes back as documentation, not as a lingering worry.
Frequently asked questions
Can data be recovered after a factory reset?
Often yes. A factory reset clears the user environment. It does not always overwrite the full drive. Recovery tools can still find files and fragments, which is why businesses should not rely on reset alone before resale, donation or disposal.
Is BitLocker or FileVault enough before disposal?
Encryption helps a lot if keys are managed correctly and the drive supports cryptographic erase. It is not a substitute for a documented wipe process. You still need a clear method, verification and a record of what happened to each device.
Who should wipe company laptops before they leave the building?
Either a trained internal team with the right tools, or an ITAD partner that collects, erases or destroys, and issues certificates. GreenByte handles pickup and verified data destruction for sites in Belgium and France.
Rather talk it through?