California E-Waste & Data Disposal Laws for Businesses

California has some of the strictest electronics and data-disposal rules in the country. For businesses, “throwing it in the dumpster” isn't just irresponsible — it can be illegal. Here's a plain-English overview.
Electronics are hazardous waste
Under California law, most electronic devices are classified as universal or hazardous waste because they contain materials like lead, mercury, and cadmium. Businesses generally cannot dispose of them in regular trash and must use a compliant recycler.
California's Covered Electronic Waste (CEW) program and the Department of Toxic Substances Control (DTSC) regulate how this material is collected and processed. Working with a compliant, certified recycler keeps you on the right side of these rules.
Data-protection obligations
Beyond environmental rules, California's data-protection laws — including the CCPA/CPRA — require businesses to protect personal information throughout its lifecycle, which includes secure destruction when devices are retired. Sector rules like HIPAA add further obligations for healthcare data.
Documented, certified data destruction is the practical way to demonstrate you met these obligations if you're ever audited or breached.
How businesses stay compliant
The simplest path to compliance is to partner with a recycler that holds the right certifications and gives you documentation for every job.
- Use a compliant, certified recycler
- Require certified, NIST 800-88 compliant data destruction
- Keep certificates of destruction and recycling on file
- Maintain a documented chain of custody
Related service
Certified E-Waste Recycling
Responsible, landfill-free recycling that supports your sustainability reporting.
Explore E-Waste RecyclingFAQs
Can a business throw old electronics in the trash in California?
No. Most electronics are classified as hazardous or universal waste in California and must be recycled through a compliant program — not placed in regular trash.
What documentation should we keep?
Keep certificates of destruction for data-bearing devices and environmental recycling certificates for the equipment, along with a record of the chain of custody. GreenTree provides all of these.