Row of closed laptops with blank asset labels, a red USB stick, keys and a return form

Returning Leased Laptops? How to Wipe Them Without Breaking the Lease Terms

RedKey USB

Leasing spreads the cost of hardware and keeps a small business on a regular refresh cycle. The awkward part comes at the end of the term, when a stack of laptops that has held client files, staff email and saved passwords for three years needs to go back to a company you do not control.

The lease makes this harder than a normal disposal. You cannot simply pull the drives and shred them, because they are not yours. Here is how we would handle a lease return so that the data is gone, the agreement is respected and the evidence is on file.

Who is responsible for data on a leased laptop?

You are. The leasing company owns the hardware, but your business is the controller of the personal data on it under UK GDPR, and that does not change when the device goes back.

If the lessor wipes devices on your behalf, they are acting as a processor and you should have written terms covering what they do. The simplest way to limit your exposure is to make sure the drives are already clean before anyone else handles them.

What should I check in the lease agreement?

Whether drives must stay in the devices, what condition machines must be returned in, which locks must be removed, what the lessor's own wiping service involves, and what happens to failed drives.

  • Drives stay in. Removing or destroying a lessor's drive is usually treated as damage or a missing part.
  • Return condition. Some lessors want an operating system installed; others accept blank drives.
  • Locks. Firmware passwords, device management enrolment and activation locks generally need removing.
  • Their wiping service. Ask about the method, whether you get a report per serial number, and how long devices wait before processing.
  • Failed drives. Ask whether you can keep a failed drive for a fee, or have it destroyed with a record.

Get the answers in writing before you start.

Why is a reset not enough for a lease return?

A reset varies with the options chosen and the drive type, leaves no record, and only covers what the operating system can see. A business return needs a full-disk erase suited to each drive and evidence for every serial number.

How do I wipe leased laptops before returning them?

Match devices to the lessor's schedule, move users' data off, release each device from accounts and management, erase every drive from a bootable tool, record the results, prepare the machines as the lease requires, and get a signed receipt.

  1. Reconcile the schedule. Compare the lessor's equipment list with what you can find, and chase gaps now rather than on collection day.
  2. Move user data. Check local folders that may not sync, and confirm with each user before their machine is erased.
  3. Release the device. Sign out of business apps and revoke the device in admin consoles; remove it from device management; on Macs, sign out and turn off Find My.
  4. Erase every drive. A bootable tool runs outside the operating system, so it works without the user's password or encryption key and reaches areas a reset can miss.
  5. Record each result. Serial number, method, date, outcome and operator, with any report saved against the asset tag.
  6. Prepare for collection. Reinstall an operating system only if the lease requires it, remove firmware passwords, keep the lessor's labels and pack the chargers.
  7. Get a receipt. A signed list of serial numbers on collection, filed with your erasure records.

Which erase method suits leased hardware?

Overwrite hard drives in full and use the drive's own sanitise command for SSDs and NVMe drives. That leaves the drive working and in place, which is what the lessor needs.

Our article on overwriting SSDs explains why flash needs a different approach.

What if a leased laptop is dead?

Speak to the lessor before doing anything. Options can include removing the drive to erase it in another machine and refitting it, keeping the failed drive for an agreed charge, or having it destroyed with a record.

Never quietly remove a drive and return the laptop without it.

Should we rely on the leasing company's wipe?

Treat it as a second layer. Devices may travel and sit in storage before processing, and you have little visibility once they leave. Wiping first means the data is gone before collection.

If you do use their service, insist on a report for every serial number. Our guide to audit-ready erasure reports sets out what to look for.

How can RedKey USB help with a lease return?

RedKey USB Professional erases each laptop from USB without removing anything, leaves the drive in working order for the lessor, and saves a PDF report per erasure that you can file against the serial number.

Because it is a one-time purchase with unlimited use, the same RedKey handles this return and the next one. Teams returning a large batch on one day can use a 5-Pack so several machines are erased at once. RedKey works with most Intel and AMD laptops and most Intel-based Macs from 2006 to 2020.

Frequently asked questions

Can I remove the hard drive before returning a leased laptop?

Usually not. The drive belongs to the lessor, and removing it can count as damage. Erase it in place instead.

Does the leasing company have to wipe my data?

Only if your agreement says so. Even then, wiping before collection keeps the data under your control.

What records should we keep for a lease return?

For each serial number, keep the erasure method, date, result and operator, plus the signed collection receipt.

Ready to erase your own devices? See RedKey USB Professional. Related reading: How to Sanitise Employee Devices Correctly and Why Audit Ready Erasure Reports Matter.

Back to blog