All data-bearing components are securely destroyed using approved methods such as shredding or degaussing before recycling begins. This ensures that all sensitive information is permanently erased and cannot be recovered, supporting GDPR and UK data protection compliance.