Used to be you had one worry. Now you’ve got two. If you dump IT kit illegally, you’re hit by the Environment Agency for waste crime. If that kit has data on it, the ICO hits you for a GDPR breach.

It’s double jeopardy. Unlimited fines from the courts for the waste, and millions potentially from the ICO. You can’t just hire a “man with a van” off Facebook anymore—it’s your neck on the line.

Criminals scavenge through bins and old drives for “identity anchors”—letterheads, director signatures, and bank details. They use these to hijack your company at Companies House.

Once they’re in, they run up massive debts in your name—known as “Long Firm Fraud”. By the time you realise, the creditors are knocking at your door, not theirs.

Think hitting “Delete” or “Format” sorts it? Think again. Deleting a file just removes the address, not the data. It’s like taking the number off your house—the house is still there.

The days of hiding behind the company name are over. Recent laws allow regulators to pierce the “corporate veil”.

If a director is found to be negligent—like letting sensitive client data end up in a skip—they can be personally prosecuted, fined, and even disqualified from running a company for up to 15 years. It’s your livelihood at stake, not just the business account.

The stats are grim. 60% of small businesses that suffer a major data loss or breach go under within six months. The costs of fines, legal fees, and reputational damage dry up cash flow instantly.

In Manchester, word travels fast. If you’re named and shamed for leaking client data, trust evaporates. And without trust, you’ve got nowt.