The document that proves your GDPR compliance.
A certificate of destruction is the formal record that your confidential documents have been permanently and securely destroyed. It is the standard evidence used to satisfy the ICO's accountability requirement under UK GDPR — and Clearcut issues one automatically after every collection.
A formal record of secure, permanent destruction.
A certificate of destruction is a document issued by a certified shredding provider after confidential documents have been collected and destroyed. It records the essential facts of the destruction event — who commissioned it, when it happened, at what address, and by what method — and provides formal confirmation that the documents have been permanently destroyed beyond recovery.
Under UK GDPR, organisations must demonstrate accountability for how personal data is handled throughout its lifecycle. This extends to the end of that lifecycle — the point at which data is no longer needed and must be disposed of. A certificate of destruction from a certified provider is the standard way of creating documented evidence that this obligation was met.
Without it, an organisation cannot demonstrate to the ICO, to auditors, or to regulators that confidential documents containing personal data were disposed of securely. It is not optional — it is the evidence that a secure disposal actually took place.
The certificate is your documented proof that a GDPR disposal obligation was fulfilled. In an ICO investigation or a regulatory audit, it is the difference between demonstrating compliance and being unable to.
UK GDPR applies to every organisation that processes personal data. A sole trader and a large NHS trust have the same accountability obligation. The certificate satisfies it for both.
A waste transfer note records the movement of waste between parties. A certificate of destruction specifically confirms permanent destruction. For GDPR purposes, you need the certificate — not just the transfer note.
A single certificate satisfies the ICO's accountability requirement, sector regulators (SRA, FCA, CQC, GPhC), NHS Records Management Code requirements and internal audit processes simultaneously.
Six things every certificate of destruction should confirm.
A robust certificate records all of the following. Clearcut's certificate includes every one as standard.
The specific date on which documents were collected and destroyed. This closes the data lifecycle for GDPR purposes.
The name and address of the organisation whose documents were destroyed. Confirms the certificate relates to a specific customer and disposal event.
Where the documents were collected from. Important for multi-site organisations needing per-location records.
How documents were destroyed — certified off-site shredding, on-site shredding or specialist destruction. Confirms the method was appropriate for personal data.
Name, address and contact details of the certified provider — Clearcut Confidential Waste, 89 Commercial Road, Bournemouth BH2 5RR.
Formal written confirmation that documents have been permanently and securely destroyed beyond recovery.
Every organisation that handles personal data.
UK GDPR applies to every organisation that processes personal data. Here are the sectors where certificates are most commonly required for specific regulatory reasons.
Required for client file closure and Law Society compliance records.
CQC inspectors expect documented evidence of compliant patient record disposal.
FCA regulations require documented disposal of client records at end of retention.
Certificate required for CQC inspections and local authority safeguarding reviews.
Certificate provides documented evidence for Ofsted information governance inspections.
Required for internal and external audit processes reviewing information governance.
Professional body reviews expect documented destruction of client records at end of retention.
GPhC requires documented disposal of prescription records and patient information.
GDPR applies to every business processing personal data regardless of size.
Automatic. Every time. No exceptions.
The certificate of destruction is the whole point of using a certified shredding service. We believe it should be issued as a matter of course — not on request, not after a reminder, not as an optional extra. It is included in every collection and issued automatically after every visit.
We hear regularly from businesses that switched to us because their previous provider issued certificates inconsistently. With Clearcut, it is always automatic, always included, always the same.
Certificate of destruction FAQs
Get your certificate of destruction with every collection.
Every Clearcut collection includes an automatic certificate of destruction at no extra charge. Get a quote today.
89 Commercial Road, Bournemouth, England, BH2 5RR
Office@Clearcutconfidentialwaste.co.uk
01202 022409
© 2026 Clearcut Confidential Waste